Nortel Networks 5500 series - Manual (Page 151)

Overview 151
Linksets
A linkset is a set of links that display on the portal page, so that the user
can easily access internal or external web sites, servers, or applications.
After the user has been authenticated, the user’s portal page all the
linksets associated with the group to which the user belongs. The user’s
portal page also all the linksets associated with the user’s extended profile.
When mapping linksets to groups or extended profiles, make sure that the
access rules specified for the profile do not contradict the links defined for
the linkset.
For information about creating and configuring the linksets, see
“Configuring linksets” (page 251) .
For information about mapping the linksets to groups, see “Mapping
linksets to a group or profile” (page 167) .
SRS rule
The SRS rule specified for the group is the set of operating system and
other software criteria that constitute the host integrity check performed by
the Nortel Health Agent applet. The SRS rule can be a composite of other
rules, but there is only one SRS rule for the group. Each group can have
a different SRS rule.
You cannot configure SRS rules using the CLI.
If you ran the quick setup wizard during the initial setup, you specified the
action to result if the SRS rule check fails. You can rerun the wizard at
any time by using the
/cfg/doamin #/aaa/nha/quick command. If
you want to change the SRS rule check result, use the /cfg/doamin
#/aaa/nha/action command (see “Configuring the Nortel Health Agent
check” (page 92) ).
Extended profiles
Passing or failing the SRS rule check is the only authorization control
provided at the group level. This is the base profile. In future releases of
the Nortel SNAS software, extended profiles will provide a mechanism
to achieve more granular authorization control, based on specific
characteristics of the user’s connection. You can define up to 63 extended
profiles for each group.
In Nortel Secure Network Access Switch Software Release 1.6.1, the data
for an extended profile include the following configurable parameters:
• linksets
•
the VLAN which the user is authorized to access
Nortel Secure Network Access Switch
Using the Command Line Interface
NN47230-100 03.01 Standard
28 July 2008
Copyright © 2007, 2008 Nortel Networks
.