Authorization During Accounting-Request - AMIGOPOD PowerConnect W Clearpass 100 Software Manual

Implementing accounting-based authorization technote

Hide thumbs Also See for PowerConnect W Clearpass 100 Software:

Deployment manual (128 pages)

Integration manual (52 pages)

Release note (38 pages)

Table Of Contents

Table of Contents

Guest

Traffic less than limit

Complete login form

Traffic over limit

Complete login form

Returned to login form

States:

Diagram 2: Sequence diagram for traffic limited authorization

If the guest has not previously logged in today, or if the guest's total traffic consumption

for today is less than the configured limit, then the guest is authorized

Accept response is sent [2].

To limit the guest's traffic, if the guest's total traffic from previous sessions today exceeds

the configured limit (200 MB) then this is determined during the authorization process

and an Access-Reject response will be sent [4].

Because the Amigopod Visitor Management Appliance uses role-based access control for

visitor accounts, the authorization rules above should be defined as part of the role that

the visitor accounts are using; in this example, the role is the "Traffic Limited Guest role".