Dell PowerConnect W Clearpass 100 Software Guía de usuario Pagina 155
- Pagina / 296
- Tabla de contenidos
- SOLUCIÓN DE PROBLEMAS
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
AOS-W Instant 6.2.1.0-3.3| User Guide Roles and Policies | 155
Chapter 14
Roles and Policies
This chapter describes the procedures for configuring user roles, role assignment, and firewall policies.
l Instant Firewall Policies and Access Rules on page 155
l Configuring User Roles on page 165
l Configuring Role Assignment Rules on page 166
l Configuring VLAN Assignment Rules on page 168
Instant Firewall Policies and Access Rules
The OAW-IAP clients are associated with user roles, which determine the client’s network privileges and the
frequency at which clients re-authenticate. You can configure rules and apply those to client or user role.
AOS-W Instant supports a firewall feature that uses a simplified firewall policy language. An administrator can define
the firewall policies on an SSID or wired profile. At the end of the authentication process, these policies are uniformly
applied to users connected to that network. The AOS-W Instant Firewall allows you to limit packets or bandwidth
available to a particular class of users. AOS-W Instant firewall manages packets according to the first rule that
matches packet.
The firewall logs on the AOS-W Instant APs are generated as syslog messages.
AOS-W Instant firewall also supports the Application Layer Gateway (ALG) functions such as SIP, Vocera, Alcatel
NOE, and Cisco Skinny protocols.
You can configure of up to 64 access control rules for a firewall policy.
This section provides the following information:
l Understanding Service Options on page 155
l Understanding Destination Options on page 157
l Configuring Access Rules on page 158
l Configuring Source NAT on page 159
l Examples for Access Rules on page 160
l Configuring ALG Protocols on page 162
l Configuring Firewall Settings for Protection from ARP Attacks on page 163
Understanding Service Options
The following table lists the set of service options available in the Instant UI. You can allow or deny access to any or
all of these services depending on your requirements.
Service Description
any Access is allowed or denied to all services.
Table 24: Network Service Options
- AOS-W Instant 1
- 6.2.1.0-3.3 1
- User Guide 1
- Contents 3
- Mesh OAW-IAP Configuration 75 6
- Wireless Network Profiles 79 7
- Uplink Configuration 95 8
- Wired Profiles 109 8
- Authentication 117 9
- 1010 10
- Roles and Policies 155 12
- Spectrum Monitor 183 14
- Adaptive Radio Management 191 15
- Intrusion Detection 201 15
- Content Filtering 209 15
- DHCP Configuration 213 16
- VPN Configuration 221 16
- IAP-VPN Configuration 225 16
- AirGroup Configuration 241 17
- Hotspot Profiles 251 18
- OAW-IAP Management 263 19
- Regulatory Domain 281 20
- ClearPass Guest Setup 286 20
- Terminology 291 20
- Related Documents 21
- Conventions 21
- Intended Audience 21
- Contacting Support 22
- AOS-W Instant Overview 23
- AOS-W Instant UI 24
- AOS-W Instant CLI 24
- New Features in 6.2.1.0-3.3 25
- Setting up Instant Network 27
- Assigning a Static IP 28
- OAW-IAP Cluster 28
- 9600 8 None 1 None 29
- Accessing the Instant CLI 30
- Sequence-Sensitive Commands 32
- Chapter 6 33
- AOS-W Instant User Interface 33
- Networks Tab 34
- Access Points Tab 34
- Clients Tab 35
- New Version Available 35
- Security 38
- Maintenance 39
- Figure 8 VPN - Default View 41
- Monitoring 44
- RF Dashboard Icons 46
- Icon Name Description 47
- RF Trends 47
- Figure 16 Signal Graph 47
- Spectrum 53
- Types of Alerts 54
- Alerts List 55
- Configuration 57
- AirGroup 57
- Language 58
- OmniVista 3600 Setup 58
- Pause/Resume 58
- 0511361-01 60
- Chapter 7 61
- Modifying the OAW-IAP Name 62
- Configuring External Antenna 63
- Upgrading an OAW-IAP 64
- Upgrading an Image Using CLI 66
- Enabling Terminal Access 67
- Enabling Auto Join Mode 67
- Configuring a Preferred Band 68
- Configuring an NTP Server 70
- 0511361-01 72
- Virtual Controller Overview 73
- Mesh Network Overview 75
- Mesh Points 76
- 0511361-01 78
- Chapter 10 79
- Wireless Network Profiles 79
- VLAN Pooling 83
- Enabling the Extended SSID 93
- Editing a WLAN SSID Profile 94
- Deleting a WLAN SSID Profile 94
- Chapter 11 95
- Uplink Configuration 95
- Ethernet Uplink 96
- 3G/4G Uplink 97
- List of Supported 3G Modems 98
- Configuring Uplinks 99
- In the Instant UI 100
- In the CLI 100
- 102102 102
- Enforcing Uplinks 104
- Setting an Uplink Priority 104
- Enabling Uplink Preemption 105
- 106106 106
- 0511361-01 108
- Configuring a Wired Profile 109
- 112112 112
- Deleting a Wired Profile 116
- Editing a Wired Profile 116
- Chapter 13 117
- Authentication 117
- 118118 118
- External RADIUS Server 119
- Internal RADIUS Server 119
- WPA and WPA2 120
- WPA and WPA2 Features 121
- Access-Accept 121
- 122122 122
- Parameter Description 125
- Table 20: 125
- Management Interface 127
- Configuring Users 129
- 136136 136
- 140140 140
- RADIUS Services 141
- Field Description 143
- Table 23: 143
- Blacklisting Clients 148
- Blacklisting Clients Manually 149
- Uploading Certificates 150
- 152152 152
- OAW-IAP 153
- 0511361-01 154
- Chapter 14 155
- Roles and Policies 155
- Service Description 156
- Destination Options 157
- Configuring Access Rules 158
- Configuring Source NAT 159
- Examples for Access Rules 160
- Configuring ALG Protocols 162
- Configuring User Roles 165
- MAC-Address Attribute 167
- 802.1X-Authentication-Type 167
- Understanding VLAN Assignment 168
- Supported VSAs 170
- 172172 172
- VLAN Derivation Rule 173
- User Role 173
- VLANs Created for an SSID 174
- Creating a User VLAN Role 175
- 176176 176
- 4. Click OK 177
- 0511361-01 178
- Layer-3 Mobility Overview 179
- Configuring L3-Mobility 180
- 0511361-01 182
- Understanding Spectrum Data 183
- Non Wi-Fi Interferers 184
- Non Wi-Fi Interferer Types 185
- Channel Details 186
- Channel Metrics 187
- Spectrum Alerts 188
- ARM Overview 191
- Airtime Fairness Mode 192
- ARM Metrics 193
- To view ARM configuration: 196
- 0511361-01 200
- OS Fingerprinting 201
- 202202 202
- Table 38: 203
- Client Detection Policies 204
- Client Protection Policies 205
- Configuring IDSUsing CLI 206
- 0511361-01 208
- Content Filtering 209
- Enabling Content Filtering 209
- 0511361-01 212
- Chapter 20 213
- DHCP Configuration 213
- Configuring DHCP Scopes 214
- Name Description 215
- Table 42: 215
- DHCP Relay and Option 82 218
- Understanding VPN Features 221
- Configuring Routing Profiles 223
- Overview 225
- VPN Configuration 226
- Viewing Branch Status 227
- IAP Table Parameters 228
- OmniVista 3600 Features 229
- Trending Reports 230
- Intrusion Detection System 230
- Configuring OmniVista 3600 231
- Shared Key 238
- 6. Click OK 239
- 0511361-01 240
- AirGroup Overview 241
- AirGroup with Instant 242
- AirGroup Solution 243
- AirGroup Features 244
- AirGroup Components 245
- To configure AirGroup Service 247
- AirGroup RADIUS client 247
- Creating a RADIUS Server 248
- Assign a Server to AirGroup 248
- Configuring RTLS 249
- To configure Aeroscout RTLS 250
- Chapter 26 251
- Hotspot Profiles 251
- Access Network Types 252
- NAI Realm List 253
- Venue types 253
- 254254 254
- 256256 256
- Configuring a 3GPP Profile 258
- Configuring a Domain Profile 258
- Configuring H2QP Profiles 258
- Configuring a Hotspot Profile 260
- Table 48: 261
- 262262 262
- Configuring LED Display 263
- Restoring Configuration 264
- 266266 266
- Rebooting the OAW-IAP 268
- 0511361-01 270
- Configuring SNMP 271
- Configuring SNMP Traps 274
- Configuring TFTP Dump Server 274
- Configuring a Syslog Server 275
- Viewing Logs 276
- Support Commands 277
- Country Codes List 281
- Code Country Name 282
- ClearPass Guest Setup 286
- Troubleshooting 290
- Acronyms and Abbreviations 291
- List of abbreviations 292
- Glossary 293
- List of Terms 294
Relacionado con productos y manuales para Software Dell PowerConnect W Clearpass 100 Software
Software Dell 735N Manual de usuario
(4 paginas)
(4 paginas)
Software Dell PowerVault 755N Información técnica
(156 paginas)
(156 paginas)
Software Dell Symantec Backup Exec Manual de usuario
(247 paginas)
(247 paginas)
Software Dell Symantec Backup Exec Manual de usuario
(18 paginas)
(18 paginas)
Software Dell Data Protection Manual de usuario
(29 paginas)
(29 paginas)
Software Dell Wake-on-LAN Manual de usuario
(15 paginas)
(15 paginas)
© 2020, manymanuals.es. Todos los derechos reservados | 0.044 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales