Rights Manager Terminology - SMC Networks ELITECONNECT SMC2502W User Manual

6.1

Rights Manager Terminology

The Rights Manager uses common terms in a very specific manner. Before starting
to administer rights, make sure you understand these terms:
A Location is a group of wheres. A Where is a WLAN Access Manager or a WLAN
Access Manager port or a specific client. Some set of rights are associated with the
location. See
information. Locations have wheres and whens associated with them.
Everywhere else is the location that a client belongs to if it does not associate with
any other location. Until you create another location, this is the location to which
all clients are associated.
A When is set of valid times that apply to a location or a group. See
Changing Group
Groups define rights for users who are members of the group. A user can be a
member of a group and is given rights as part of the group. An Allowed Group is
a group allowed at a specified location. Groups can be one of the following types:
• Guest: the rights given to someone who clicks the Guest button on the logon
page.
• Implicit users: the base group in which rights are allocated to all authenticated
users at the specified location.
• Normal: the only group that users can belong to. A user cannot belong to a
Logon, Guest or Implicit User group.
• Logon: the rights given to a client who has not yet logged on.
See Section 6.6, Adding, Modifying, or Deleting a User
users.
A Realm is an ordered list of authentication services. See the Rights Tutorial for
more information. There are both Rights Manager realms and Kerberos realms.
Kerberos realms refer to the domain specified by Kerberos.
Allows specify packets that are permitted to be forwarded by a WLAN Secure
Server or a WLAN Access Manager. Allows can include:
• Destination protocol
• Destination port
• Destination IP address
Redirects specify packets that are allowed to be forwarded, but require that these
packets be redirected to a new destination, also specified by the redirect. An
example is requesting a DNS server; packets could be redirected to the enterprise
DNS server rather than the one that was originally specified. Redirects can include:
• Original protocol
• Original port
• Original address
6-2
Section 6.4.5, Changing WLAN Access Manager Rights
Properties.
for more
Section 6.5,
for more information about
Configuring the Rights Manager