Appendix C. Policy Priority - LevelOne WHG-311 User Manual

Appendix C. Policy Priority


Global Policy, Service Zone Policy, Authentication Policy and User Policy
WHG Controller supports multiple Policies, including one Global Policy and multiple individual Policy which can be
assigned and bound to Group. Global Policy is the system's universal policy and applied to all clients, while other
individual Policy can be selected and defined to be applied to any Service Zone. On the other hand, Service Zone
also has a Default Policy. For some authentication, such as Local, RADIUS and LDP, user can assign to different
Group individually. The clients belonging to a Service Zone will be bound by an applied Policy. In addition, a Policy
can be applied at a Group basis; a Group of users can be bound by a Policy. So one user may be applied different
policy at the same time. Which policy is actually applied to this user?
The Policy Priority must be:
User Policy >> Authentication Policy >> Service Zone Policy >> Global Policy
Now, let us discus different user policy type:
For Local, RADIUS and LDAP, if these users are assigned to different Group individually, these users can be
o
assigned to their Group. For example, a Local user, user01, is assigned to Group1 and the Local Authentication
is assigned to Group2. If Group1 in Service Zone1 can be applied Policy1. Then user01 login to Service Zone1
will get Policy1. This is a common case for users that can assign Group individually.
For Local, RADIUS and LDAP, if these users do not assigned any Group individually, so they are same as other
o
authentication server users that they can not assign to Group individually. For example, a POP3 user, pop01,
the POP3 Authentication is assigned to Group1. If Group1 in Service Zone1 can be applied Policy1. Then pop01
login to Service Zone1 will get Policy1. This is another common case for users that can assign Group by
authentication server.
If Authentication server also do not assign to a Group, then the user will applied the Service Zone Default Policy.
o
For example, a Local user, user01, is assigned to Group None and the Local Authentication is also assigned to
Group None. If the Default Policy of Service Zone1 is applied Policy1. Then user01 login to Service Zone1 will
get Policy1.
If the Default Service Zone Policy is None. Authentication server does not assign to a Group and user Group is
o
None too. For example, a Local user, user01, is assigned to Group None and the Local Authentication is also
assigned to Group None. If the Default Policy of Service Zone1 is None. Then user01 login to Service Zone1 will
apply the Global Policy.
So, the Global Policy has the lowest policy priority; on the other hand, the User Policy will be the highest one.
291