Table of Contents
Advertisement
User's Manual
AMG-2001
Access and AP Management Gateway
A Service Zone may or may not require client authentication, depending on how the administrator sets
it up. If a Service Zone requires user authentication, the client will be prompted for the login in first
before using the network services, no matter the client is connecting to its SSID wirelessly or a switch
port via wired line,.
Group is a group of user accounts sharing the same access privileges, QoS properties and network
policies. Each client account belongs to a Group. Each Group may or may not have the access privilege
of a Service Zone, depending on the how the administrator define its policy. If the administrator does
not assign a new account to any specific Group, the account belongs to a catch-all group named
"None" by default.
Policy is for defining rules, privileges or properties for managing users. Each user group is bound by a
Policy within a given Service Zone. The same group may or may not be bound to the same policy in
different Service zones. There are two tiers of Policies. The first tier is a policy named 'Global-Policy'.
The Global-Policy is a base policy which will be applied all users. The second tier is called 'Group-Policy'
or simply 'Policy', which can be chosen to bound the network behaviors of a Group. The administrator
can define the Firewall Profile, Route Profile, Schedule Profile and Max Sessions in a Policy.
The following Figure 1 depicts an example relationship of Service Zone, Group and Policy. In this
example, Students and faculties logging into Service Zone 1 will be governed by Policy-A. Guests only
have the access of Service Zone 3, and will be bounded by Policy-C. Faculties have the access to both
Service Zone 1 and Service Zone 2 under two different policies.
Figure 1: An example relationship of Service Zone, Group and Policy
7
Advertisement
Table of Contents
