Users And Authentication; Rights - SMC Networks ELITECONNECT SMC2502W User Manual

Command and control communication between the WLAN Access Manager and
the WLAN Secure Server is through an encrypted connection. Command and
control communication between WLAN Access Managers is also through an
encrypted connection. User packets that must be tunneled between WLAN Access
Managers to ensure transparent Layer 3 roaming are not encrypted.
1.2.3 Rights Manager
The Rights Manager, which is part of the WLAN Secure Server, enables the
network administrator to edit rights for users, groups, locations, and times. It
supplies the WLAN Access Managers with appropriate rights based on who, when,
and where. The Rights Manager also authenticates users.

Users and Authentication

Active Authentication
As described earlier in
Rights Manager to the WLAN Access Manager limits the packets allowed into the
network. Additionally, any HTTP requests from the end-user are redirected to the
Rights Manager. The Rights Manager sets up an HTTPS connection with the user,
and presents a logon screen.
The user types their username and password, or requests guest rights. Users are
authenticated, while guests are given a set of pre-defined rights that limit network
access to the external Internet.
The Rights Manager supports four methods of authentication:
• A built-in database of user-password pairs
• An interface to an external LDAP authentication service
• An interface to an external RADIUS service
• An interface to a Kerberos service
After performing the appropriate authentication, the Rights Manager determines
the correct set of rights for that particular user based on group membership,
geographic location of the client, day, and time of day. The Rights Manager also
offers an advanced authentication option in which multiple authentication
methods can be used.
SMC EliteConnect WLAN Security System User Manual
WLAN Access Manager, the initial set of rights sent by the
1-5