User's Manual

hwc_vnsconfiguration.fm
Virtual Network configuration
Defining RADIUS filter policy for VNSs and VNS groups
A31003-W1050-U100-2-7619,
March 2008
HiPath Wireless Controller, Access Points and Convergence Software V5 R1 , C20/C2400 User Guide 193
6.8 Defining RADIUS filter policy for VNSs and VNS groups
The next step in configuring a VNS is to define the filter ID values for a VNS.
These filter ID values must match those set up on the RADIUS servers.
Note: This configuration step is optional. If filter ID values are not defined, the
system uses the default filter as the applicable filter group for authenticated users
within a VNS. However, if more user-specific filter definitions are required, for
example filters based on a user’s department, then the filter ID configuration is
used to overwrite the default assignment.
In addition to the filter ID values, you can also set up a group ID for a VNS with
AAA authentication. You can set up a group within a VNS that relies on the
RADIUS attribute Login-LAT-Group (RFC2865). For each group, you can define
filtering rules to control access to the network.
If you define a group within an AAA VNS, the group (or child) definition acquires
the same authentication and privacy parameters as the parent VNS. However,
you need to define a different topology and filtering rules for this group.
All the filters are exposed. For the Assignment by SSID with no authentication,
the filter that is applied to the client session is the default filter.
To define the filter ID values on a VNS:
1. From the main menu, click Virtual Network Configuration. The Virtual
Network Configuration page is displayed.
2. In the left pane Virtual Networks list, click the VNS you want to define filter
ID values for. The Topology tab is displayed.
3. Click the RAD Policy tab.