HP StorageWorks MSA 2/8 HP StorageWorks Fabric OS 3.X Document Addendum (AA-RW - Page 139

In the New Remote Access Policy Wizard window, click, In the Set Up a Custom Policy window

Page 139 highlights

Fabric OS procedures user guide 3. In the New RADIUS Client window: ■ In the Friendly name space, enter a name for the switch that allows you to identify it easily. ■ In the Client Address (IP or DNS) space, enter the IP address of the switch. 4. Click Next. 5. In the next window, enter and confirm the shared secret in the spaces provided. Make sure the shared secret matches that configured on the switch (as described in "Adding a RADIUS Server.") 6. Click Finish. The new client friendly name appears in the list of clients. To change the shared secret, right-click the client, select Properties, and change the secret in the properties window. To create user and admin remote access policies: 1. From the Windows Start menu, select Programs > Administrative Tools:Internet Authentication Service to bring up the Internet Authentication Service window. 2. If you do not already have Windows groups set up, use standard Windows procedures to set up a Windows group of login names assigned to the user role and another Windows group of login names assigned to the admin role. 3. Right-click the Remote Access Policies icon folder and select New Remote Access Policy. 4. In the New Remote Access Policy Wizard window, click Next. 5. In the Set Up a Custom Policy window: ■ Select the Custom policy radio button. ■ Enter a policy name for the user role (for example, HP User) in the space provided. ■ Click Next. 6. In the Select Attribute window, select Windows-Groups and click Add. 7. In the Select Groups window: ■ Enter the name of the Windows group that contains login names assigned to the user role. ■ Click Check Names. When the system finds the Windows group, it underlines the name. 8. Click OK. 9. In the Group window, check that the Windows group is listed and then click OK. 10. In the Policy Conditions window, check that the policy name is listed (for example, HP User) and then click Next. 11. In the Permissions window, select the Grant remote access permission radio button and then click Next. 12. In the Profile window, click Edit Profile. 13. In the Edit Dial-in Profile window, select the Authentication tab. Fabric OS 3.x Document Addendum 139

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250

Fabric OS procedures user guide
139
Fabric OS 3.x Document Addendum
3.
In the New RADIUS Client window:
In the Friendly name space, enter a name for the switch that allows you to identify it
easily.
In the Client Address (IP or DNS) space, enter the IP address of the switch.
4.
Click
Next
.
5.
In the next window, enter and confirm the shared secret in the spaces provided. Make sure
the shared secret matches that configured on the switch (as described in “
Adding a
RADIUS Server.”
)
6.
Click
Finish
.
The new client friendly name appears in the list of clients. To change the shared secret,
right-click the client, select
Properties
, and change the secret in the properties window.
To create user and admin remote access policies:
1.
From the Windows
Start
menu, select
Programs > Administrative Tools:Internet
Authentication Service
to bring up the Internet Authentication Service window.
2.
If you do not already have Windows groups set up, use standard Windows procedures to
set up a Windows group of login names assigned to the user role and another Windows
group of login names assigned to the admin role.
3.
Right-click the
Remote Access Policies
icon folder and select
New Remote Access
Policy
.
4.
In the New Remote Access Policy Wizard window, click
Next
.
5.
In the Set Up a Custom Policy window:
Select the
Custom policy
radio button.
Enter a policy name for the user role (for example,
HP User
) in the space provided.
Click
Next
.
6.
In the Select Attribute window, select
Windows-Groups
and click
Add
.
7.
In the Select Groups window:
Enter the name of the Windows group that contains login names assigned to the user
role.
Click
Check Names
.
When the system finds the Windows group, it underlines the name.
8.
Click
OK
.
9.
In the Group window, check that the Windows group is listed and then click
OK
.
10.
In the Policy Conditions window, check that the policy name is listed (for example,
HP
User
) and then click
Next
.
11.
In the Permissions window, select the
Grant remote access permission
radio button and
then click
Next
.
12.
In the Profile window, click
Edit Profile
.
13.
In the Edit Dial-in Profile window, select the
Authentication
tab.