Dell Powerconnect W-ClearPass Hardware Appliances W-ClearPass Policy Manager 6 - Page 221
RADIUS Enforcement Profiles, Table 116
View all Dell Powerconnect W-ClearPass Hardware Appliances manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 221 highlights
l Generic Application Enforcement - Application specific enforcement profile with customization attribute-value pairs for authorization of generic applications. l CLI Based Enforcement - Enforcement profile that encapsulates CLI commands to be issued to the network device. The "Target Device" attribute specifies the device on which the "Command" attribute is executed. l Agent Enforcement - Enforcement profile that encapsulates attributes sent to Dell OnGuard agent. Attributes can be specified to bounce the client or to send a custom message to the client. l ClearPass Entity Update Enforcement - Post-authentication enforcement profile that can be filled with attributes to update the tag entries in endpoints and guest users. l Session Restrictions Enforcement - Post-authentication enforcement profile that can be filled with attributes to restrict users based on various factors such as bandwidth usage, active session count, and also terminate sessions when the limits are reached. Table 116: Add Enforcement Profile page Parameter Description Name/ Description Freeform label for enforcement profile. Type Auto-filled based on the selected template: RADIUS, TACACS, SNMP, Application, RADIUS_CoA Action Relevant only for RADIUS type enforcement profiles. Accept, Deny or Drop the request. Device Group List Associate the profile with pre-configured Device Groups. l Add New Device Group to add a new device group. l Add to add a device group from this drop-down list. l Remove, View Details, Modify to remove, view the details of, or modify the selected enforcement profile, respectively NOTE: This feature does not work with RADIUS CoA type Enforcement Profiles. The remaining Enforcement Profile tabs vary in content, depending on the Template Type (auto-specified in the Type field when a Template has been selected): l "RADIUS Enforcement Profiles " on page 221 l "RADIUS CoA Enforcement Profiles" on page 223 l "SNMP Enforcement Profiles " on page 224 l "TACACS+ Enforcement Profiles " on page 224 l "Application Enforcement Profiles " on page 226 l "CLI Enforcement Profile " on page 227 l "Agent Enforcement Profiles " on page 228 l Post Authentication Enforcement Profiles RADIUS Enforcement Profiles RADIUS Enforcement Profiles contain name/value pairings of attributes from the RADIUS dictionaries; in this editing context, Policy Manager displays only those attributes marked in the dictionary with the OUT or INOUT qualifier. The following figures illustrate rules for several sample profiles: Dell Networking W-ClearPass Policy Manager 6.0 | User Guide 221