Switch Security
6.To modify the attributes of an existing group, select the group from the list of groups displayed and click the Edit button.
Modify the existing group’s guest designation, VLAN ID, access period and WLAN assignment.
7.If an existing group is no longer needed (perhaps obsolete in function), select the group from those displayed and click the Delete button to permanently remove the group from the list of available groups.
8.To create a new group, click the Add button and provide the following information.
Name | Define a unique group name that differentiates this new group from others with similar |
| attributes. |
Guest Group | Select the Guest Group checkbox to assign this particular group (and the users within) only |
| temporary access to the local Radius server, thus restricting their authentication period to a |
| user defined access interval. |
VLAN ID | Define the VLAN ID for the new group. The VLAN ID is representative of the shared SSID |
| each group member (user) employs to interoperate with one another within the switch |
| managed network (once authenticated by the local Radius server). |
Time of Access Start | Set the time the group is authenticated to interoperate within the switch managed network. |
| Each user within the group will be authenticated with the local Radius server. Those group |
| members successfully authenticated are allowed access to the switch managed network |
| using the restrictions defined for the group. |
Time of Access End | Set the time each group’s user base will loose access privileges within the switch managed |
| network. After this time, users within this group will not be authenticated by the local Radius |
| server. However, if a user is part of a different group that has not exceeded their access end |
| interval, then the user may still interoperate with the switch (remain authenticated) as part |
| of that group. |
Available WLANs | Use the Available WLANs Add |
| group from the available list to the configured list. Once on the configured list (and the |
| changes applied), the members of this group can interoperate with the switch on these |
| WLANs (once authenticated by the local Radius server). |
Configured WLANs | The Configured WLANs columns displays the WLANs this new group can operate within |
| (once users are configured). Use the Add |
| the available list to the configured list. |
Time of access in | Select the checkboxes corresponding to the days of the week you would like this new group |
days | to have access to the switch managed network using the WLANs configured. Of course, the |
| user base within the group still needs to be authenticated by the local Radius server first. |
a. Refer to the Status field for the current state of the requests made from applet. This field displays error messages if something goes wrong in the transaction between the applet and the switch.
b. Click OK to use the changes to the running configuration and close the dialog.
c. Click Cancel to close the dialog without committing updates to the running configuration.
6.9.7 Viewing Radius Accounting Logs
Accounting logs contain information about the use of remote access services by users.
To display the Radius accounting logs:
1. Select Security > Radius Server from the main menu.