Creating A User Role; Figure 16 Radius Role Editor Page - Aruba Networks PowerConnect W Clearpass 100 Software Deployment Manual

User roles can be used to apply different security policies to different classes of guest user accounts. For
example, guest users, employees, and contractors might all have differing network security policies. The
RADIUS attributes defined by a user role can then specify what each class of user is authorized to do.
To create and configure user roles for the server to use for RADIUS authorization:
Go to RADIUS > User Roles.

The User Roles list view defines the user roles for the RADIUS server and allows you to make changes to
existing user roles.
Each role is identified by a unique number. The ID is shown in the list view. When creating visitor accounts,
the role_id field should contain the ID of one of the user roles defined in the RADIUS server.
The RADIUS attributes for each role are shown in the list view. The icon displayed with each attribute
indicates the type of condition attached to it:
The attribute is enabled and will always be included in a RADIUS Access-Accept message.

The attribute is disabled and will never be included in a RADIUS Access-Accept message.

The attribute has a condition expression that will determine if it is included in the RADIUS server's

response.

Creating a User Role

To create a role that will be assigned to guest users:
1. Go to RADIUS > User Roles, then click the
opens.

Figure 16 RADIUS Role Editor page

118 | RADIUS Services
Create a new role link. The RADIUS Role Editor form
ClearPass Guest 3.9 | Deployment Guide