Table of Contents
Advertisement
How To Configure
Step 1. Create and configure the marketing user group on the RADIUS server or W310.
To create the user group on the W310, use the
Step 2. Create and configure the engineering user group on the RADIUS server or
W310.
To create the user group on the W310, use the
Step 3. Create an IP policy:
1
Create an IP policy that has an index number of 301:
W310-1(super)# ip access-control-list 301
W310-1(super/ACL 301)#
2
Name the IP policy server-filter:
W310-1(super/ACL 301)# name server-filter
3
Set the owner of the policy:
W310-1(super/ACL 301)# owner jackt
Step 4. Add rule 101 to IP policy 301. This rule will deny access to the marketing server
by non-marketing users:
1
Add a rule 101 to IP policy 301:
W310-1(super/ACL 301)# ip-rule 101
2
Configure rule 101 to filter packets that are not coming from members of the
marketing user group (identified by policy user group policy-mrkt):
W310-1(super/ACL 301/ip rule 101)#not source-user-group
policy-mrkt
3
Configure rule 101 to filter packets that are destined to the marketing server (IP
address of 192.168.0.15):
W310-1(super/ACL 301/ip rule 101)# destination-ip host
192.168.0.15
4
Configure rule 101 to deny packets that match both criteria (packets that are not
from members of the marketing group and that also have a destination address of
the marketing server).
W310-1(super/ACL 301/ip rule 101)# composite-operation
Deny
5
Exit IP Rule mode:
W310-1(super/ACL 301/ip rule 101)# exit
W310-1(super/ACL 301)#
Avaya W310 Command Reference Guide
Chapter 10
Setting Policy: Example 1
user-group
command.
user-group
command.
233
Advertisement
Table of Contents
