Dell PowerConnect W-Airwave W-Airwave 7.2 Configuration Guide - Page 134

Security > Server Groups, Server Groups Overview

Page 134 highlights

Table 61 Security > Policies > Services Field Descriptions (Continued) Field Default Description IP Protocol Number (0-255) Configure Application Level No Gateway Application Level Gateway dhcp Specify the numeric identifier of the upper layer IP protocol that an IP packet should use. Specify whether to create an application level gateway, which filters incoming and outgoing information packets before copying and forwarding across the gateway. If you select Yes in this field, you are prompted with a new drop-down menu in which to select the Application Level Gateway type. If you select Yes for Configure Application Level Gateway, then specify the gateway type from this drop-down menu. The following application level gateway types are supported:  dhcp  dns  ftp  h323  noe  rtsp  sccp  sip  sips  svp  tftp  vocera Security > Server Groups Server Groups Page Overview The Server > Server Groups page displays all server groups currently configured, and the profiles and folders that are used by each server group, to include the following:  AAA  Captive Portal Auth  Management Auth  Stateful 802.1X Auth  TACACS Accounting  VPN Auth  Folder The list of servers in a server group is an ordered list. By default, the first server in the list is always used unless it is unavailable, in which case the next server in the list is used. You can configure the order of servers in the server group. In the Web UI, use the up or down arrows to order the servers (the top server is the first server in the list). In the CLI, use the position parameter to specify the relative order of servers in the list (the lowest value denotes the first server in the list). The first available server in the list is used for authentication. If the server responds with an authentication failure, there is no further processing for the user or client for which the authentication request failed. You can optionally enable fail-through authentication for the server group so that if the first server in the list returns an authentication deny, the controller attempts authentication with the next server in the ordered list. The controller attempts authentication with each server in the list until either there is a successful authentication or the list of servers in the group is exhausted. This feature is useful in environments where there are multiple, independent authentication servers; users may fail authentication on one server but can be authenticated on another server. 134 | Dell PowerConnect W Configuration Reference Dell PowerConnect W AirWave 7.2 | Configuration Guide

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160

134
|
Dell PowerConnect W Configuration Reference
Dell PowerConnect W AirWave 7.2
| Configuration Guide
Security > Server Groups
Server Groups Page Overview
The
Server > Server Groups
page displays all server groups currently configured, and the profiles and folders that
are used by each server group, to include the following:
AAA
Captive Portal Auth
Management Auth
Stateful 802.1X Auth
TACACS Accounting
VPN Auth
Folder
The list of servers in a server group is an ordered list. By default, the first server in the list is always used unless it
is unavailable, in which case the next server in the list is used. You can configure the order of servers in the server
group. In the Web UI, use the up or down arrows to order the servers (the top server is the first server in the list).
In the CLI, use the position parameter to specify the relative order of servers in the list (the lowest value denotes
the first server in the list).
The first available server in the list is used for authentication. If the server responds with an authentication
failure, there is no further processing for the user or client for which the authentication request failed. You can
optionally enable fail-through authentication for the server group so that if the first server in the list returns an
authentication deny, the controller attempts authentication with the next server in the ordered list. The
controller attempts authentication with each server in the list until either there is a successful authentication or
the list of servers in the group is exhausted. This feature is useful in environments where there are multiple,
independent authentication servers; users may fail authentication on one server but can be authenticated on
another server.
IP Protocol Number
(0-255)
Specify the numeric identifier of the upper layer IP protocol that an IP packet should
use.
Configure Application Level
Gateway
No
Specify whether to create an application level gateway, which filters incoming and
outgoing information packets before copying and forwarding across the gateway. If
you select
Yes
in this field, you are prompted with a new drop-down menu in which
to select the Application Level Gateway type.
Application Level Gateway
dhcp
If you select
Yes
for
Configure Application Level Gateway
, then specify the gateway
type from this drop-down menu. The following application level gateway types are
supported:
dhcp
dns
ftp
h323
noe
rtsp
sccp
sip
sips
svp
tftp
vocera
Table 61
Security > Policies > Services Field Descriptions
(Continued)
Field
Default
Description