Dell Powerconnect W-ClearPass Virtual Appliances W-ClearPass Guest 6.0 Deploym - Page 61
RFC 3576 Dynamic Authorization, Filtering the List of Active Sessions, Disconnect, Reauthorize, Filter
View all Dell Powerconnect W-ClearPass Virtual Appliances manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 61 highlights
RFC 3576 Dynamic Authorization Dynamic authorization describes the ability to make changes to a visitor account's session while it is in progress. This includes disconnecting a session, or updating some aspect of the authorization for the session. The Active Sessions page provides two dynamic authorization capabilities that apply to currently active sessions: l Disconnect causes a Disconnect-Request message to be sent to the NAS for an active session, requesting that the NAS terminate the session immediately. The NAS should respond with a Disconnect-ACK message if the session was terminated or Disconnect-NAK if the session was not terminated. l Reauthorize causes a Disconnect-Request message to be sent to the NAS for an active session. This message will contain a Service-Type attribute with the value 'Authorize Only'. The NAS should respond with a Disconnect-NAK message, and should then reauthorize the session by sending an Access-Request message to the RADIUS server. The RADIUS server's response will contain the current authorization details for the visitor account, which will then update the corresponding properties in the NAS session. If the NAS does not support RFC 3576, attempts to perform dynamic authorization will time out and result in a 'No response from NAS' error message. Refer to RFC 3576 for more details about dynamic authorization extensions to the RADIUS protocol. Filtering the List of Active Sessions You can use the Filter tab to narrow the search parameters and quickly find all matching sessions: Enter a username or IP address in the Filter field. Additional fields can be included in the search if the "Include values when performing a quick search" option was selected for the field within the view. To control this option, use the Choose Columns command link on the More Options tab. You may enter a simple substring to match a portion of the username or any other fields that are configured for search, and you can include the following operators: Dell Networking W-ClearPass Guest 6.0 | Deployment Guide RFC 3576 Dynamic Authorization | 61