NetComm IAC3000, Руководство пользователя

Страница: 87 / 226

IAC3000
User’s Manual
83
¾
Maximum Concurrent Session for User: Include Maximum Concurrent Session for User, from 10 to
Unlimited. The concurrent sessions for each user, it can be restricted by administrator.
Note: For more information, please refer to Appendix E. Session Limit and Session Log.
4.2.4.2 Policy 1~12
Polices can be defined in the Policy tab. The administrator can select one of the defined policies to apply it to the
specific authentication option. All clients belong to this authentication option will be bound by this policy. A policy
could be applied at zone level, at group level or at user level. User level policy overrides group level policy. Group
level policy overrides zone level policy. Zone level policy overrides the global policy.
When the type of authentication database is “Local”, a policy is applied at per user basis. When the type of
database is NTDOMAIN or ONDEMAND, a policy is applied to the whole user database. When type of database is
RADIUS, a policy is mapped to a user group of a RADIUS class. The Class-Policy Mapping function will be
available to let the administrator assign a policy for a RADIUS Class attribute. When the type of database is LDAP,
a policy is applied to user group defined an attribute-value pair. The Attribute-Policy Mapping function will be
available to let administrator assign a policy for a LDAP Attribute. When the type of database is SIP, the Policy
selection function will be available to let the administrator assign a policy for all SIP users.
y
Select Policy: Select a Policy for further configuration. Below depicts an example of selecting Policy 1 .
y
Firewall Profile: Each Policy has a firewall service list and a set of firewall profile consisting of firewall rules.
y
Select Policy: Select Policy1~Policy12 to set the Firewall Profile , Specific Route Profile, Schedule Profile
and Maximum Concurrent Session .
y
Firewall Profile: Each Policy has a firewall service list and a set of firewall profile consisting of firewall rules.
y
Specific Route Profile: The default gateway of WAN1, WAN2, or a desired IP address can be defined in a
policy. When Specific Default Route is enabled, all clients applied this policy will access the Internet through
this default gateway.
y
Schedule Profile: The Schedule table in a 7X24 format is used to control the clients’ login time. When
Schedule is enabled, clients applied policies are only allowed to login the system at the time which is checked
in the applied policy.
y
Maximum Concurrent Sessions: Set the maximum concurrent sessions for each client.