User guide

Defining RADIUS Filter Policy for WM-ADs and WM-AD Groups
Summit WM20 User Guide, Software Release 4.2 121
5 From the RADIUS drop-down list, select the server you want to use for RADIUS accounting, and
then click Use. The server’s default information is displayed and a red asterisk is displayed next to
Acct, indicating that a server has been assigned.
The RADIUS servers are defined in the Global Settings screen. For more information, see “WM-AD
Global Settings” on page 92.
6 Select Use server for RADIUS Accounting.
7 In the Port box, type the port used to access the RADIUS server. The default is 1812.
8 In the # of Retries box, type the number of times the Summit WM Controller will attempt to access
the RADIUS server.
9 In the Timeout box, type the maximum time that a Summit WM Controller will wait for a response
from the RADIUS server before attempting again.
10 In the Interim Interval box, type the time interval when accounting records are sent. Interim
accounting records are sent if the interim time interval is reached before the session ends. The
default is 60 minutes.
11 To save your changes, click Save.
Defining RADIUS Filter Policy for WM-ADs and WM-AD
Groups
The next step in configuring a WM-AD is to define the filter ID values for a WM-AD. These filter ID
values must match those set up on the RADIUS servers.
NOTE
This configuration step is optional. If filter ID values are not defined, the system uses the default filter as the
applicable filter group for authenticated users within a WM-AD. However, if more user-specific filter definitions are
required, for example filters based on a user’s department, then the filter ID configuration is used to overwrite the
default assignment.
In addition to the filter ID values, you can also set up a group ID for a WM-AD with AAA
authentication. You can set up a group within a WM-AD that relies on the RADIUS attribute Login-
LAT-Group (RFC2865). For each group, you can define filtering rules to control access to the network.
If you define a group within an AAA WM-AD, the group (or child) definition acquires the same
authentication and privacy parameters as the parent WM-AD. However, you need to define a different
topology and filtering rules for this group.
All the filters are exposed. For the Assignment by SSID with no authentication, the filter that is applied
to the client session is the default filter.
To define the filter ID values on a WM-AD:
1 From the main menu, click WM-AD Configuration. The WM-AD Configuration screen is
displayed.
2 In the left pane WM Access Domains list, click the WM-AD you want to define filter ID values for.
The Topology tab is displayed.