Dell Powerconnect W-ClearPass Hardware Appliances W-ClearPass Policy Manager 6 - Page 344

Table 220, Authentication Namespace

Page 344 highlights

Attribute Dest-IP-Address Dest-Port Description Dst-IP-Address and Dst-Port are the IP address and port at which Policy Manager received the request (RADIUS, TACACS+, etc.) Protocol Request protocol: RADIUS, TACACS+, WebAuth NAD-IP-Address IP address of the network device from which the request originated Client-Mac-Address MAC address of the client Client-Mac-Address-Colon, Client-MacAddress-Dot, Client-Mac-Address-Hyphen, Client-Mac-Address-Nodelim Client MAC address in different formats Client-IP-Address IP address of the client (if known) Connection namespace appears in the following editing contexts: n Service rules n Role mapping policies l Authentication Namespace - The authentication namespace can be used in role mapping policies to define roles based on what kind of authentication method was used or what the status of the authentication is. The attribute names and possible values with descriptions are shown in the table below: Table 220: Authentication Namespace Attributes Attribute Name Values InnerMethod PAP CHAP MSCHAP EAP-GTC EAP-MSCHAPv2 EAP-MD5 EAP-TLS OuterMethod PAP CHAP MSCHAP EAP-MD5 EAP-TLS EAP-TTLS EAP-FAST EAP-PEAP Phase1PAC l None - No PAC was used to establish the outer tunnel in the EAP-FAST authentication method l Tunnel - A tunnel PAC was used to establish the outer tunnel in the EAP-FAST authentication method l Machine - A machine PAC was used to establish the outer tunnel in the EAP-FAST authentication method; machine PAC is used for machine authentication (See EAP-FAST in 344 Dell Networking W-ClearPass Policy Manager 6.0 | User Guide

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358
  • 359
  • 360
  • 361
  • 362
  • 363
  • 364
  • 365
  • 366
  • 367
  • 368
  • 369
  • 370
  • 371
  • 372

344
Dell Networking W-ClearPass Policy Manager 6.0 | User Guide
Attribute
Description
Dest-IP-Address
Dst-IP-Address and Dst-Port are the IP address and port at which
Policy Manager received the request (RADIUS, TACACS+, etc.)
Dest-Port
Protocol
Request protocol: RADIUS, TACACS+, WebAuth
NAD-IP-Address
IP address of the network device from which the request originated
Client-Mac-Address
MAC address of the client
Client-Mac-Address-Colon, Client-Mac-
Address-Dot, Client-Mac-Address-Hyphen,
Client-Mac-Address-Nodelim
Client MAC address in different formats
Client-IP-Address
IP address of the client (if known)
Connection namespace appears in the following editing contexts:
n
Service rules
n
Role mapping policies
l
Authentication Namespace
- The authentication namespace can be used in role mapping policies to define roles
based on what kind of authentication method was used or what the status of the authentication is. The attribute
names and possible values with descriptions are shown in the table below:
Table 220:
Authentication Namespace Attributes
Attribute
Name
Values
InnerMethod
PAP
CHAP
MSCHAP
EAP-GTC
EAP-MSCHAPv2
EAP-MD5
EAP-TLS
OuterMethod
PAP
CHAP
MSCHAP
EAP-MD5
EAP-TLS
EAP-TTLS
EAP-FAST
EAP-PEAP
Phase1PAC
l
None
- No PAC was used to establish the outer tunnel in the EAP-FAST authentication method
l
Tunnel
- A tunnel PAC was used to establish the outer tunnel in the EAP-FAST authentication
method
l
Machine
- A machine PAC was used to establish the outer tunnel in the EAP-FAST
authentication method; machine PAC is used for machine authentication (See EAP-FAST in