Reviewin g Your PolicyUsing the 8950 AAA Policy Assistant in Server
Management Tool
................................................................................................................................... .........................................................................................................................
365-360-001R6.0
Issue 1, December 2008 9-25
.................................................................................................................................... ........................................................................................................................
Figure 9-15 Policy Configuration–PolicyAssistant Advanced Attribute Sets option
Click on the ... and a list of files containing the existing Attribute Sets are displayed.
Select one of the Attribute Sets and select the Attribute Set Name is defined in the
User Profile checkbox. Click OK. The Attribute Set for Policy panel is displayed as
shown in Figure 9-10. Figure 9-10 now displays the values of the Attribute sets from
the set that was selected.
When the 8950 AAA server receives a request from user ‘kyle’, it forwards the packet
to the SecurID server for authentication. If accepted the packet is returned to the 8950
AAA server, which then looks up the attribute set using the User-Name attribute. If the
packet passes the Items to Verify checks, in this case if the deactivation date is not
exceeded, the request is authorized and accepted.
4. Click Next to complete the Policy Wizard.
Reviewing Your Policy
How to review your policy
This concludes the configuration steps using the wizard.
Click Next to view your policy, and click Finish to close the wizard.
Using the PolicyAssistant
About Using the PolicyAssistant
After creating a policy, you must decide how to route incoming requests to a specific
policy. 8950 AAA enables you to use a realm name or a DNIS number to identify the
correct policy for your users. For example, you may need to group corporate users by the
domain they belong to or the access number they dial when traveling. The Policy Assistant
panel, as shown in Figure 9-16, has two sections. The PolicyAssistant section, which is the
top section, allows you to create/configure new Policies, manage policies to control user