Nortel Networks 4050 manual Configuring groups and extended profiles using the CLI

196Chapter 5 Configuring groups and profiles

Before you begin

Before you configure groups, client filters, and extended profiles on the Nortel SNAS 4050, complete the following tasks:

1Create the linksets, if desired (see “Linksets and links” on page 394).

2Create the SRS rules (see “TunnelGuard SRS Builder” on page 317).

3If authentication services have already been configured, ascertain the group names used by the authentication services.

Group names defined on the Nortel SNAS 4050 must correspond to group names used by the authentication services. Table 30 summarizes the requirements for the various authentication methods.

Table 30 Group names in the Nortel SNAS 4050 and authentication services

Authentication method	Group name on the Nortel SNAS 4050 must correspond
	to...
RADIUS	A group name defined in the vendor-specific attribute used by
	the RADIUS server. Contact your RADIUS system
	administrator for information.
LDAP	A group name defined in the LDAP group attribute used by
	the LDAP server. Contact your LDAP system administrator for
	information.
Local database	A group name used in the database. The group name is for
	internal use to control access to intranet resources according
	to the associated access rules. When you add a user to the
	local database, you map the user to one or more of the
	defined user groups.

Configuring groups and extended profiles using the CLI

The basic steps to configure groups and extended profiles on the Nortel

SNAS 4050 using the CLI are:

1Configure the group (see “Configuring groups using the CLI” on page 198).

2Configure the client filters that will be referenced in the extended profiles (see “Configuring client filters using the CLI” on page 201). The client filters can be referenced by all extended profiles in the domain.

320818-A