Installation guide

Switch Security
6-83
4. Refer to the WLANs Assigned area of the Groups tab to review which switch WLANs are available
for use with configured groups.
5. Refer to the Time of access in days field to assess the intervals (which days) the group has been
assigned access to the switch managed network (after each user has been authenticated). At least
one day is required.
This value is read-only within the Groups tab. Click Edit to modify the access assignments of an
existing group or click Add to create a new group with unique access assignments. Editing guest
designations is not permitted.
6. To modify the attributes of an existing group, select the group from the list of groups displayed and
click the Edit button.
Modify the existing group’s guest designation, VLAN ID, access period and WLAN assignment.
7. If an existing group is no longer needed (perhaps obsolete in function), select the group and click the
Delete button to permanently remove the group from the list. The group can only be removed if all
the users in the group are removed first.
8. To create a new group, click the Add button and provide the following information.
Time of Access End
Displays the time each group’s user base will loose access
privileges. After this time, users within this group will not be
authenticated by the local Radius server. However, if a user is part
of a different group that has not exceeded their access interval,
then the user may still interoperate with the switch (remain
authenticated) as part of that group.
Name
Define a unique group name that differentiates this new group
from others with similar attributes.
Guest Group
Select the Guest Group checkbox to assign this particular group
(and the users within) only temporary access to the local Radius
server, thus restricting their authentication period to a user
defined access interval.
VLAN ID
Define the VLAN ID for the new group. The VLAN ID is
representative of the shared SSID each group member (user)
employs to interoperate within the switch managed network
(once authenticated by the local Radius server).
Time of Access Start
Set the time the group is authenticated to interoperate. Each user
within the group is authenticated with the local Radius server.
Those group members successfully authenticated are allowed
access to the switch using the restrictions defined for the group.
Time of Access End
Set the time each group’s user base will loose access privileges
within the switch managed network. After this time, users within
this group will not be authenticated by the local Radius server.
However, if a user is part of a different group that has not
exceeded their access end interval, the user may still interoperate
with the switch (remain authenticated) as part of that group.