HP MSM7XX User Manual

Working with RADIUS attributes
Colubris AV-Pair - Site attribute values
15-37
SMTP redirect
If an unauthenticated user establishes a connection to their email server, the SMTP redirect
feature will not work once the user logs in. The user’s email is still sent to the original email
server.
To avoid this, do not use an access list to open TCP port 25 for unauthenticated users.
Critical access list definitions (such as for a remote login page, certificates) should not use
the OPTIONAL setting because if these definitions fail to initialize there is no indication in the
log.
Defining access lists
Access lists are defined by adding the following Colubris AV-Pair value string to the RADIUS
profile for a controller or to the local list (Public access > Attributes page).
access-list=value
Each value string defines one rule. Up to 99 rules can be defined for an access list.
All rules that make up an access list must be initialized without error for the list to be active.
(You can force the controller to ignore initialization errors on a rule-by-rule basis by using the
OPTIONAL parameter.)
You can define up to 32 access lists.
Activating site access lists
When an access list is activated on the controller, it applies to all access controlled user
traffic handled by the controller.
Access lists are activated by adding the following Colubris AV-Pair value string to the
RADIUS profile for a controller or to the local list (Public access > Attributes page).
use-access-list=uselistname
Only one access list can be active on the controller. This list must be initialized without an
error.
It is possible to set an access list to apply only for unauthenticated users by specifying the
following value string:
use-access-list-unauth=uselistname
User access lists
Access lists can also be activated on a per-user basis by configuring the appropriate settings
for each user account. See Access list on page 15-67 for more information.
A default access list can defined by adding the following Colubris AV-Pair value string to the
RADIUS profile for a controller or to the local list (Public access > Attributes page). This
defines the access list to use for all users whose profiles do not contain an access list value.
default-user-access-list=uselistname

HP MSM7XX Specifications

General

Brand	HP
Model	MSM7XX
Category	Controller
Language	English