Table of Contents
Advertisement
78 Chapter 4 Configuring user tunnels
Configuring group characteristics
In addition to assigning users to groups and providing authentication access, you
can configure other group characteristics:
1
2
3
4
5
6
7
8
NN46110-500
Go to the Profiles > Groups window and click on the Edit button next to the
group that you want to configure.
Under the Connectivity section, click on the Configure button to change the
any of the group characteristics.
In the Contact Information field, enter the name of someone who serves as
the point of contact. This is typically the administrator.
In the Access Hours field, specify the time ranges during which access is
allowed for users in a group. These time ranges are also configured from the
Profiles > Hours window.
Specify the Call Admission Priority level (from low to highest) that you
want to permit for the group. Each level is assigned a percentage of the total
number of calls allowed access to the Nortel VPN Router. If there is a
particularly high number of users logged in, new users could be denied call
access, based on their call admission priority, until existing callers disconnect.
Specify the Forwarding Priority level (from low to highest) that you want to
provide to sessions for users in this group. Forwarding priority assures a
certain level of latency and bandwidth allocation. For example, a group with
the highest forwarding priority has the highest possible bandwidth service and
the lowest level of latency. Conversely, if there is a particularly high level of
traffic on the line, packets for a low-priority group might be delayed or
dropped. Since a low-priority group has the least amount of bandwidth and
the highest level of latency, some of its packets would wait until the
higher-priority-level packets have been forwarded or they would be dropped.
For the Number of Logins, enter the maximum number of simultaneous
logins IPsec clients in the group are allowed. The Nortel VPN Router does not
enforce the maximum number of logins across tunnel types. If you set the
number of simultaneous logins to 1, a client can still get another tunnel type
connection if the client is configured to use multiple tunnel types. To limit the
number of connections a client can have, configure the user for a single tunnel
type.
Select Enabled to enable the Password Management facilities:
Advertisement
Table of Contents
