216Chapter 5 Configuring groups and profiles

Table 33 Add a Client Filter fields (Sheet 2 of 2)

Field

Description

 

 

Name

Names the filter.

 

name is a string that must be unique in the

 

domain.

 

You reference the client filter name when configuring

 

the extended profile.

 

 

TunnelGuard Check Passed

Specifies whether passing or failing the TunnelGuard

 

host integrity check triggers the filter.

 

true — the client filter triggers when the

 

TunnelGuard check succeeds.

 

false — the client filter triggers when the

 

TunnelGuard check fails.

 

ignore — passing or failing the TunnelGuard

 

check will not trigger the client filter.

 

The default is ignore.

 

For example, in order to grant limited access rights to

 

users who fail the TunnelGuard check, set the value to

 

false, create an extended profile that references this

 

client filter, and then map the extended profile to a

 

restrictive VLAN.

 

For information about configuring the TunnelGuard

 

checks, see “Configuring the TunnelGuard check using

 

the CLI” on page 132 or “Configuring the TunnelGuard

 

check using the SREM” on page 168.

 

 

4Click Apply.

The new client filter now appears in the Client Filters table.

5Click Apply on the toolbar to send the current changes to the Nortel

SNAS 4050. Click Commit on the toolbar to save the changes permanently.

320818-A

Page 216
Image 216
Nortel Networks 4050 manual Check using the Srem on