Dell Powerconnect W-ClearPass Hardware Appliances User Manual page 219

Figure 188:
Enforcement Profiles Page
Policy Manager comes pre-packaged with the following system-defined enforcement profiles:
[Allow Access Profile]. System-defined RADIUS profile to allow network access; Policy Manager sends a
l
RADIUS AccessAccept message with no attributes.
[Deny Access Profile]. System-defined RADIUS profile to deny network access; Policy Manager sends a
l
RADIUS AccessReject message with no attributes.
[Drop Access Profile]. System-defined profile to drop the network access request; Policy Manager silently drops
l
the RADIUS AccessRequest message.
[TACACS Deny Profile]. System-defined TACACS+ profile to deny network device access through the
l
TACACS+ protocol.
There are several system-defined profiles associated with different vendors' RADIUS CoA actions.
l
[Cisco - Terminate Session] - Terminate a session on a Cisco device.
n
[Cisco - Disable-Host-Port] - Disable a port on a Cisco Ethernet switching device.
n
[Cisco - Bounce-Host-Port] - Perform link-up/link-down action on a Cisco Ethernet switching device.
n
[Cisco - Reuthenticate-Session] - Trigger a session reauthentication on a Cisco device.
n
[HP - Terminate Session] - Terminate a session on an HP device.
n
[Dell - Terminate Session] - Terminate a session on a Dell Wireless Controller.
n
There are four built-in TACACS+ profiles that are mapped to the different administrator roles available in Policy
l
Manager. These profiles can be used to give permissions to log into the Policy Manager UI.
[TACACS Help Desk]. System-defined profile to allow administrative access to Policy Manager using the
n
Helpdesk role.
[TACACS Network Admin]. System-defined profile to allow administrative access to Policy Manager using
n
the Network Administrator role.
[TACACS Receptionist]. System-defined profile to allow administrative access to Policy Manager using the
n
Receptionist role.
[TACACS Super Admin]. System-defined profile to allow administrative access to Policy Manager using the
n
Super Administrator role.
From the Enforcement Profile page, when you click Add Enforcement Profile, Policy Manager displays the Add
Enforcement Profile page:
Dell Networking W-ClearPass Policy Manager 6.0 | User Guide 219