Nomadix Access Gateways, Руководство пользователя

Страница: 137 / 330

A
CCESS
G
ATEWAY
System Administration 125
The following screen shows a realm routing policy that handles suffix-based usernames
using a tunnel profile.
This differences in this example are that the realm name is “tcisp.com”, “Suffix match
only” is enabled (the delimiter in this case is “@”), and a tunnel profile, “LNSOne”, is
selected instead of a RADIUS service profile.
This means that this realm routing policy will match usernames that are of the format
“username@tcisp.com”. Since this policy references a tunnel profile, no RADIUS access
requests will be sent to any RADIUS server. In this case, the NSE will use the L2TP
tunnel parameters specified in the tunnel profile to establish a tunnel and pass the
username/password input to the tunnel server.
Again, as before, the username passed to the tunnel server will have realm information
stripped since the checkbox for “Strip off routing information when sending to tunnel
server” is checked. This checkbox may be unchecked if it is necessary for usernames to
contain realm information for user authentication.