SMC Networks ELITECONNECT SMC2502W User Manual page 183

Table C-4 Rights Explained
Right
Match groups=Guest
Guest Initial Group Expire
= Guest:Never
Location Expire =
Everywhere Else:Never
Final Group Expire =
Guest: Never
Allows = HTTPS Logon
page, DHCP, Outside
World, SSL Stop page.
HTTP logon redirector
Redirects = DNS
redirect:Internal blocker,
Logon page shortcut, No
internal rights UI, no
external rights UI, no
internal admin UI, no SSL
internal admin UI
NAT = 1
Expire max = Never
Expire min = Never
Linger = 0
The XML that follows is an XML representation of the rights that will be passed to
the WLAN Access Manager for this client. Notice it has traffic allowed and
redirected, as specified by the Allow and Redirect streams above, and it has the
NAT setting. It has been reformatted for readability, but contains the same data.
Client Rights for 00:02:e3:1e:36:4a
These rights expire in 1 week, 2 days:
<?xml version="1.0" standalone="yes"?>
<client_rights>
<expiry>799977</expiry>
<id></id>
<allow_real_ip>True</allow_real_ip>
<allow_static_ip>False</allow_static_ip>
EliteConnect WLAN Security System User Manual
Description
tells us that for the user Guest we found one group called Guest
of which this user is a member.
Never says the Guest group has rights that never expire.
Never tells us that we matched the location Everywhere Else,
and rights from this location never expire.
tells us that based on the location, the Guest group is allowed,
so we keep this group and its expire time.
tells us that given the list of above groups, we are going to
manually allow the traffic specified by the each colon separated
Allow.
tells us that in addition to allowing the traffic specified in the
Allows, we are going to also allow the traffic specified in these
Redirects, but each redirect will have its traffic redirected as
specified in the individual Redirects settings.
tells us that either the Guest group, or the location forces NAT.
If any group that matches for a user, or the location setting has
NAT checked, then that user will use a NAT type address.
indicates that based on the location and groups, the maximum
expire time for these rights is Never.
indicates that based on the location and groups, the minimum
expire time for these rights is Never.
indicates that the client should not linger at all based on the
settings in the groups.
C-15