Ruckus Wireless ZoneDirector 3000, Руководство пользователя, Страница: 384 / 430

Using an External Server for Administrator Authentication
SSL Certificate Advanced Options
384
Ruckus Wireless, Inc.
• Ruckus Wireless private attribute
- Vendor ID: 25053
- Vendor Type/Attribute Number: 1 (Ruckus-User-Groups)
- Value Format: group_attr1,group_attr2,group_attr3,...
• Cisco private attribute (if your network is using a Cisco access control server)
- Vendor ID: 9
- Vendor Type / Attribute Number: 1 (Cisco-AVPair)
- Value Format: shell:roles=”group_attr1 group_attr2 group_attr3 ...”
• Active Directory or LDAP:
• Set up administrator groups.
• Populate these groups with users to whom you want to grant administrator
access. One way to do this is to edit each user’s Member of profile and add
the group to which you want the user to belong. Remember the group names
that you set; you will enter this information when you create administrator
roles in ZoneDirector (
see Step 3 ).
• : See for more information.
2 Set up ZoneDirector to use an AAA server ( Configure > AAA Servers ).
3 Create an Administrator Role in ZoneDirector ( Configure > Roles ).
• Allow access to all/specific WLANs.
• Allow/deny Guest Pass Generation.
• Ensure that Allow ZoneDirector Administration is enabled, and choose the
level of administration privileges you want to allow for this role.
CAUTION! If you do not select the Allow ZoneDirector Administration check box,
administrators that are assigned this role will be unable to log into ZoneDirector even
if all other settings are configured correctly.
4 Test your authentication settings ( Configure > AAA Servers > Test
Authentication Settings ).
5 Specify AAA server to use ( Administer > Preferences > Authenticate with
Auth Server ).