14CHAPTER 1: INTRODUCTION

priority rule associated with the user, the EFW Policy from that rule is then associated with the user, all other associations are removed.

if a rule priority or group is changed, the correct associations have to be re-established. Clicking on the Recalculate EFW membership button will cause 3Com Network Access Manager to find all users that are members of that rule or group, and then finding the authorization rules applied for each. In a large network this can take a considerable time.

Backing up 3Com Data from 3Com Network Access Manager is stored in Active Directory, Network Access via an LDAP interface. Your normal methods for backing up/restoring of Manager Data data from Active Directory will also cover 3Com Network Access Manager

data. No special backup/restore is required for 3Com Network Access Manager data.

Concepts and

This section provides descriptions of concepts and terminology that you

Terminology

will need to be familiar with in order to use 3Com Network Access

 

Manager.

Active Directory

Active Directory is the distributed directory service included with

 

Microsoft Windows Server 2003 and Microsoft Windows 2000 Server

 

operating systems. Active Directory enables centralized, secure

 

management of an entire network, which might span a building, a city, or

 

multiple locations throughout the world. Active Directory stores

 

information about objects on the computer network and makes this

 

information easy for administrators and users to find and apply. With

 

Active Directory, users can access resources anywhere in the network with

 

a single logon, and administrators have a single point of administration

 

for all objects in the network. When interfaced to IAS, Active Directory

 

provides secure single login for users, and administrators.

 

Users/Groups/Computers

 

Users, groups and computers are standard Active Directory objects,

 

membership of a group is managed using normal Active Directory

 

management tools.

Internet

IAS is Microsoft’s implementation of a RADIUS server, providing

Authentication

authentication and authorization of users. IAS is included with Microsoft

Service (IAS)

Windows Server 2003 and Microsoft Windows 2000 Server operating

Page 14
Image 14
3Com DUA1550-0AAA02 manual Concepts, Terminology