Configuring Radius Request Attributes Policies (Nsm Procedure) - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INFRANET CONTROLLER GUIDE REV 01 Manual

Related
Documentation

Configuring RADIUS Request Attributes Policies (NSM Procedure)

Copyright © 2010, Juniper Networks, Inc.
Chapter 8: Configuring the Infranet Controller RADIUS Server and Layer 2 Access
Table 23: RADIUS Return Attributes Policies Configuration
Details (continued)
Option
Applies to Roles
Role Selection
Configuring RADIUS Request Attributes Policies (NSM Procedure) on page 83
Configuring RADIUS Attribute Logs (NSM Procedure) on page 211
Configuring RADIUS Clients (NSM Procedure) on page 77
Configuring a New RADIUS Vendor (NSM Procedure) on page 78
You can configure RADIUS request attributes policies to enforce restrictions on the
processing of authentication requests, which are based on the RADIUS authentication
requests, before a connection can be authenticated. Then you can assign RADIUS request
attributes policies as a realm restriction.
To configure RADIUS request attributes policies:
In the NSM navigation tree, select Device Manager > Devices.
1.
Click the Device Tree tab, and then double-click the Infranet Controller device for
2.
which you want to configure RADIUS request attributes policies.
Click the Configuration tab. In the configuration tree, select UAC > Network Access
3.
> RADIUS Attributes > RADIUS Request Attributes Policies.
Add or modify RADIUS request attributes policies as specified in Table 24 on page 84.
4.
Click one:
5.
OK—Saves the changes.
Function
Specifies the roles to which the
policies apply.
Lists the members and
non—members for applying
the policy.
Your Action
Select Policy applies to ALL
roles to apply this policy to
all users.
Select Policy applies to
SELECTED roles to apply
this policy only to users who
are mapped to roles in the
Members list.
Select Policy applies to all
roles OTHER those
selected to apply this policy
to all users except for those
who map to the roles in the
Members list.
Select the role from the
Non-members list and click
Add to move them to the
Members list.
83