Information Technology Reference
In-Depth Information
Condition
Description
Client IPv4 Address
Limits the policy to clients whose IPv4 address name matches the
condition. (Pattern matching supported.)
Client IPv6 Address
Limits the policy to clients whose IPv6 address name matches the
condition. (Pattern matching supported.)
Client Vendor
Limits the policy to RADIUS clients of the specified vendor names.
MS-RAS Vendor
Specifies the vendor identification number of the network access server
requesting authentication.
Called Station ID
Limits the policy to the specific phone number of the NAS server.
(Pattern matching supported.)
NAS Identifier
Limits the policy to the specified named network access device.
NAS IPv4
Limits the policy to the network access server whose IPv4 address
matches the policy. (Pattern matching supported.)
NAS IPv6
Limits the policy to the network access server whose IPv6 address
matches the policy. (Pattern matching supported.)
NAS Port Type
Limits the policy to the access clients using the specified port type.
Typical values include analog phone lines, ISDN, VPN protocols, and
IEEE 802.11 wireless.
TABLE 4-3
Network policy constraints
Constraint
Description
Authentication Methods
Allows access only for those clients using the specified authentication
methods.
Idle Timeout
Disconnects the client after the maximum idle time specified.
Session Timeout
Specifies the maximum time a session can be connected. User is
disconnected when the time limit is reached.
Called Station ID
Specifies the phone number of the network access server. (Pattern
matching supported.)
Day and time restrictions
Specifies the days of the week and hours of the day during which
access is permitted.
NAS Port Type
Specifies the acceptable port types. Typical values include Async
(Modem), ISDN, VPN protocols, and IEEE 802.11 wireless.
