beautypg.com

7 viewing radius accounting logs, 7 viewing radius accounting logs -73, Viewing radius accounting logs – Motorola Series Switch WS5100 User Manual

Page 297

background image

Switch Security

6-73

6. To modify the attributes of an existing group, select the group from the list of groups displayed and click

the

Edit

button.

Modify the existing group’s guest designation, VLAN ID, access period and WLAN assignment.

7. If an existing group is no longer needed (perhaps obsolete in function), select the group from those

displayed and click the

Delete

button to permanently remove the group from the list of available groups.

8. To create a new group, click the

Add

button and provide the following information.

a. Refer to the

Status

field for the current state of the requests made from applet. This field displays

error messages if something goes wrong in the transaction between the applet and the switch.

b. Click

OK

to use the changes to the running configuration and close the dialog.

c. Click

Cancel

to close the dialog without committing updates to the running configuration.

6.9.7 Viewing Radius Accounting Logs

Accounting logs contain information about the use of remote access services by users.

To display the Radius accounting logs:

1. Select

Security

>

Radius Server

from the main menu.

Name

Define a unique group name that differentiates this new group from others with similar
attributes.

Guest Group

Select the

Guest Group

checkbox to assign this particular group (and the users within) only

temporary access to the local Radius server, thus restricting their authentication period to a
user defined access interval.

VLAN ID

Define the VLAN ID for the new group. The VLAN ID is representative of the shared SSID
each group member (user) employs to interoperate with one another within the switch
managed network (once authenticated by the local Radius server).

Time of Access Start

Set the time the group is authenticated to interoperate within the switch managed network.
Each user within the group will be authenticated with the local Radius server. Those group
members successfully authenticated are allowed access to the switch managed network
using the restrictions defined for the group.

Time of Access End

Set the time each group’s user base will loose access privileges within the switch managed
network. After this time, users within this group will not be authenticated by the local Radius
server. However, if a user is part of a different group that has not exceeded their access end
interval, then the user may still interoperate with the switch (remain authenticated) as part
of that group.

Available WLANs

Use the Available WLANs

Add ->

and

Remove <-

functions to move WLANs for this new

group from the available list to the configured list. Once on the configured list (and the
changes applied), the members of this group can interoperate with the switch on these
WLANs (once authenticated by the local Radius server).

Configured WLANs

The Configured WLANs columns displays the WLANs this new group can operate within
(once users are configured). Use the

Add ->

and

Remove <-

functions to move WLANs from

the available list to the configured list.

Time of access in
days

Select the checkboxes corresponding to the days of the week you would like this new group
to have access to the switch managed network using the WLANs configured. Of course, the
user base within the group still needs to be authenticated by the local Radius server first.