Colubris Networks CN3000 Administrator's Manual page 342

Chapter 15 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Sample setup - Steel-Belted Radius - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Chapter 15
8. Click the Returned list attributes tab.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 342 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
You can now specify the attributes that will be returned to the CN3000 after it is
successfully authenticated. This enables you to define a number of important
operating characteristics, including:
• The location of custom HTML pages that must be downloaded by the CN3000.
• One or more access lists for specifying the set of network resources customers
have access to.
For this example, you should create the following three entries:
A
colubris-AVPair access-list=all,ACCEPT,tcp,192.168.2.99,80
This access list permits all users on the public network to access the web
server at 192.168.2.99. The typical role of such a server would be to
display information about the public access network: how to get an
account, how to login, etc.
B
Colubris-AVPair access-list=cust,ACCEPT,tcp,192.168.2.100,80
This access list permits only authenticated customers to access the web
server at 192.168.2.100.
C
Colubris-AVPair
This activates the access list all for the HOTSPOTS profile. The cust
access list will be activated in the CUSTOMERS-NO-SMTP and
CUSTOMERS-SMTP-REDIRECT profiles.
(Refer to
"Creating a profile for the CN3000 on the RADIUS server" on page 150
a complete list of all supported attributes.)
To add each entry:
• Click Ins. Select Colubris-AVPair and enter the appropriate string. For example:
use-access-list=all
for