Table of Contents
Advertisement
Appendix B. Policy Priority (Global Policy, Service
Zone Policy, Authentication Policy and User Policy)
AMG-2102 supports multiple Policies, including one Global Policy and 24 individual Policy can be
assign to different Group. Global Policy is the system's universal policy and applied to all clients,
while other individual Policy can be selected and defined to be applied to any Service Zone. On the other
hand, Service Zone also has a Default Policy. For some authentication, such as Local, RADIUS and
LDP, user can assign to different Group individually. The clients belonging to a Service Zone will be
bound by an applied Policy. In addition, a Policy can be applied at a Group basis; a Group of users can
be bound by a Policy. So one user may be applied different policy at the same time. Which policy is
actually applied to this user?
The Policy Priority must be:
User Policy >> Authentication Policy >> Service Zone Policy >> Global Policy
Now, let us discus different user policy type:
1.
For Local, RADIUS and LDAP, if these users are assigned to different Group individually, these
users can be assigned to their Group. For example, a Local user, user01, is assigned to Group1 and
the Local Authentication is assigned to Group2. If Group1 in Service Zone1 can be applied Policy1.
Then user01 login to Service Zone1 will get Policy1. This is a common case for users that can
assign Group individually.
2.
For Local, RADIUS and LDAP, if these users do not assigned any Group individually, so they are
same as other authentication server users that they can not assign to Group individually. For
example, a POP3 user, pop01, the POP3 Authentication is assigned to Group1. If Group1 in Service
Zone1 can be applied Policy1. Then pop01 login to Service Zone1 will get Policy1. This is another
common case for users that can assign Group by authentication server.
3.
If Authentication server also do not assign to a Group, then the user will applied the Service Zone
Default Policy. For example, a Local user, user01, is assigned to Group None and the Local
Authentication is also assigned to Group None. If the Default Policy of Service Zone1 is applied
Policy1. Then user01 login to Service Zone1 will get Policy1.
4.
If the Default Service Zone Policy is None. Authentication server does not assign to a Group and
user Group is None too. For example, a Local user, user01, is assigned to Group None and the Local
Authentication is also assigned to Group None. If the Default Policy of Service Zone1 is None. Then
AMG-2102 Gigabit Access and AP Management Gateway Pro
227
User's Manual
Advertisement
Table of Contents
