filter-ID 是其中一個attribute 定義在 RFC RADIUS
https://tools.ietf.org/html/rfc2865
主要目的是可以根據access-accept 所傳回的attribute來分群組
但是NAS也需要設定支援這些attribute 才行。
RADIUS其中也定義包含有filter id 以外的attributes
merraki 的文章,精簡文的參考
https://documentation.meraki.com/MR/Group_Policies_and_Blacklisting/Using_RADIUS_Attributes_to_Apply_Group_Policies
Hello there ! Welcome everybody sharing and learning here. I intend to improve my english ability so that I will try to write something in english. For another purpose I will post what I learned recently.
4/28/2016
dynamic VLAN configuration
dynamic VLAN configuration
Topology
2008 R2 NPS server
active directory need to config group, and add user account into group
NPS->network policy set 3 attributes for dynamic VLAN
tunnel-type :vlan
tunnel-medium-type :802.1X
tunnel-private-group-ID : 4
4/27/2016
2008 R2 NPS server set group and class or filter-id attribute
class and filter-ID is applying for identify the user group in "access-accept" of RADIUS packets, and then NAS will base on this attribute to identify the user role.
In general, freeradius can create account + class attribute for grouping users
But NPS can't bind user account and group at the same time.
The followings guide how to build relationship to account and class attribute.
1.create group at active directory

2.bind user into group
3.create network policy + configure class attribute, like teacher or student
4.configure class attribute, remove service type and frame protocol first
Once user authenticated successfully, the account will earn a user role for group the users. Like teacher and student and then managed them by firewall policy.
In general, freeradius can create account + class attribute for grouping users
But NPS can't bind user account and group at the same time.
The followings guide how to build relationship to account and class attribute.
1.create group at active directory

Once user authenticated successfully, the account will earn a user role for group the users. Like teacher and student and then managed them by firewall policy.
訂閱:
文章 (Atom)
我確診了COVID-19 怎麼會?
一直自認為天選之人的我,終究還是感染COVID-19, 我是怎麼感染上的? 應該是家人之間互相傳染的 感染上有什麼症狀? 初期會覺得喉嚨怪怪地,然後一症狀就會愈來愈明顯 看診有哪些步驟? 先打電話到診所說有快篩陽,要約視訊看診,先西醫看診並上傳給衛生局,拿到居隔單,掛中醫申請...
-
出差回來後一定要玩的事 騎車征服武嶺 找一個伴, 目前鎖定T。
-
不知不覺得我已經34歲了,還是孤家寡人一枚。 今年怎麼追怎麼失敗 ,有夠遜!我想我要單身一靠子了。 今天心情有點低落,因為regina雖然沒男友,但是好像對我沒興趣 約她好像不容易呀,line 回的好像有一搭沒一搭的 該如何是好呢? 今晚做了一個想了很久的決定,買一...
-
一般html裏常見的內容區塊有H1.2.3...和body 可以在sytle裏預先定義好body的屬性 如此一來 內容就會以定義好的clas來呈現 此外,若還有H1, H2...若沒有特別定義,也都會繼承body的style 當然若H1,H2.....