Nortel Networks 4050 manual Groups and profiles

Chapter 1 Overview 35

•VoIP — automatic access for VoIP traffic. The network access device places VoIP calls in a VoIP VLAN without submitting them to the Nortel

SNAS 4050 authentication and authorization process.

When a client attempts to connect to the network, the network access device places the client in its Red VLAN. The Nortel SNAS 4050 authenticates the client and then downloads a TunnelGuard applet to check the integrity of the client host. If the integrity check fails, the Nortel SNAS 4050 instructs the network access device to move the client to a Yellow VLAN, with its associated filter. If the integrity check succeeds, the Nortel SNAS 4050 instructs the network access device to move the client to a Green VLAN, with its associated filter. The network access device applies the filters when it changes the port membership.

The VoIP filters allow IP Phone traffic into one of the preconfigured VoIP VLANs for VoIP communication only.

The default filters can be modified to accommodate network requirements, such as Quality of Service (QoS) or specific workstation boot processes and network communications.

For information about configuring VLANs and filters on the network access device, see Release Notes for Nortel Ethernet Routing Switch 5500 Series, Software Release 4.3 (217468-B) or Release Notes for the Ethernet Routing Switch 8300, Software Release 2.2.8 (316811-E).

Groups and profiles

Users are organized in groups. Group membership determines:

•user access rights

Within the group, extended profiles further refine access rights depending on the outcome of the TunnelGuard checks.

•number of sessions allowed

•the TunnelGuard SRS rule to be applied

•what displays on the portal page after the user has been authenticated

For information about configuring groups and extended profiles on the Nortel SNAS 4050, see “Configuring groups and profiles” on page 191.

Nortel Secure Network Access Switch 4050 User Guide