Nortel 2350 参考指南
306 Configuring Authentication, Authorization, and Accounting Parameters
NN47250-102 (320666-G Version 02.01)
•
Deny—Refuses network access if the conditions in the location policy rule are
matched.
matched.
If you select Deny, go to
12 In the In ACL Name box, type the name of the input ACL that applies if the location policy
rules are matched.
The ACL name can be 1 to 32 alphanumeric characters, with no spaces or tabs. The name can
include hyphens (-), underscores (_), or periods (.). ACL names are case-sensitive and must
begin with a letter. Do not include any of the following terms in the name: all, default-action,
map, help, editbuffer.
include hyphens (-), underscores (_), or periods (.). ACL names are case-sensitive and must
begin with a letter. Do not include any of the following terms in the name: all, default-action,
map, help, editbuffer.
13 In the Out ACL Name box, type the name of the output ACL that applies if the location policy
rules are matched.
14 In the VLAN Name box, type the name of the VLAN to which users are assigned if the location
policy rules are matched. The name can be 1 to 32 alphanumeric characters, with no spaces or
tabs.
tabs.
Click Finish.
Viewing and Changing Mobility Profiles
Mobility Profile™ attributes allow or deny access to the network for a specific user or group of users. When
you create a Mobility Profile, you specify which AP ports, Distributed APs, or wired authentication ports are
to be included. Typically, you include ports that are defined as AP ports or Distributed APs. You can specify
that all or no ports are included, or you can specify a list of ports to be included.
you create a Mobility Profile, you specify which AP ports, Distributed APs, or wired authentication ports are
to be included. Typically, you include ports that are defined as AP ports or Distributed APs. You can specify
that all or no ports are included, or you can specify a list of ports to be included.
After creating a Mobility Profile, you can assign it to users created in the local WSS user database, or users
who are authenticated and authorized by a RADIUS server. You assign the name of the Mobility Profile by
using the Mobility-Profile RADIUS attribute, which is a Nortel vendor-specific attribute (VSA).
who are authenticated and authorized by a RADIUS server. You assign the name of the Mobility Profile by
using the Mobility-Profile RADIUS attribute, which is a Nortel vendor-specific attribute (VSA).
Viewing Mobility Profiles
1
Select the Configuration tool bar option.
2
In the Organizer panel, click the plus sign next to the WSS.
3
Click the plus sign next to AAA.
4
Select Mobility Profiles.
The configured Mobility Profiles appear.
Creating a Mobility Profile
1
Access the Create Mobility Profile wizard:
a
Select the Configuration tool bar option.
b
In the Organizer panel, click the plus sign next to the WSS.
c
Click the plus sign next to AAA.