Nortel 1010 用户指南
78 Chapter 4 Configuring user tunnels
NN46110-500
Configuring group characteristics
In addition to assigning users to groups and providing authentication access, you
can configure other group characteristics:
can configure other group characteristics:
1
Go to the Profiles
> Groups window and click on the Edit button next to the
group that you want to configure.
2
Under the Connectivity section, click on the Configure button to change the
any of the group characteristics.
any of the group characteristics.
3
In the Contact Information field, enter the name of someone who serves as
the point of contact. This is typically the administrator.
the point of contact. This is typically the administrator.
4
In the Access Hours field, specify the time ranges during which access is
allowed for users in a group. These time ranges are also configured from the
Profiles
allowed for users in a group. These time ranges are also configured from the
Profiles
> Hours window.
5
Specify the Call Admission Priority level (from low to highest) that you
want to permit for the group. Each level is assigned a percentage of the total
number of calls allowed access to the Nortel VPN Router. If there is a
particularly high number of users logged in, new users could be denied call
access, based on their call admission priority, until existing callers disconnect.
want to permit for the group. Each level is assigned a percentage of the total
number of calls allowed access to the Nortel VPN Router. If there is a
particularly high number of users logged in, new users could be denied call
access, based on their call admission priority, until existing callers disconnect.
6
Specify the Forwarding Priority level (from low to highest) that you want to
provide to sessions for users in this group. Forwarding priority assures a
certain level of latency and bandwidth allocation. For example, a group with
the highest forwarding priority has the highest possible bandwidth service and
the lowest level of latency. Conversely, if there is a particularly high level of
traffic on the line, packets for a low-priority group might be delayed or
dropped. Since a low-priority group has the least amount of bandwidth and
the highest level of latency, some of its packets would wait until the
higher-priority-level packets have been forwarded or they would be dropped.
provide to sessions for users in this group. Forwarding priority assures a
certain level of latency and bandwidth allocation. For example, a group with
the highest forwarding priority has the highest possible bandwidth service and
the lowest level of latency. Conversely, if there is a particularly high level of
traffic on the line, packets for a low-priority group might be delayed or
dropped. Since a low-priority group has the least amount of bandwidth and
the highest level of latency, some of its packets would wait until the
higher-priority-level packets have been forwarded or they would be dropped.
7
For the Number of Logins, enter the maximum number of simultaneous
logins IPsec clients in the group are allowed. The Nortel VPN Router does not
enforce the maximum number of logins across tunnel types. If you set the
number of simultaneous logins to 1, a client can still get another tunnel type
connection if the client is configured to use multiple tunnel types. To limit the
number of connections a client can have, configure the user for a single tunnel
type.
logins IPsec clients in the group are allowed. The Nortel VPN Router does not
enforce the maximum number of logins across tunnel types. If you set the
number of simultaneous logins to 1, a client can still get another tunnel type
connection if the client is configured to use multiple tunnel types. To limit the
number of connections a client can have, configure the user for a single tunnel
type.
8
Select Enabled to enable the Password Management facilities: