AppendixA. PolicyPriority
GlobalPolicy,AuthenticationPolicyandUserPolicy
TheRAYTALKRA‐696supportsmultiplePolicies,includingoneGlobalPolicyand5individualPoliciescanbeassignedtodifferent
AuthenticationServer.GlobalPolicyisthesystem’suniversalpolicyandis appliedto allclients,while otherindividualPolicies
canbeselectedanddefinedtobeappliedtoanyAuthenticationServer.
Forsomeauthentication,suchasLocalandRADIUS,userscanbeassignedtodifferentPoliciesindividually.
Oneusermaybeappliedtoadifferentpolicyatthesametime.
Whichpolicyisactuallyappliedtothisuser?
ThePolicyPriorityisenforcedasfollows:
UserPolicy>>AuthenticationPolicy>>Glob
alPolicy
Now,letusdiscussthedifferentuserpolicytypes:
> ForLocalandRADIUS,userscanbeassignedtodifferentpoliciesindividually.
Forexam ple,aLocaluser,user01,isassignedtoPolicy1andtheLocalAuthenticationPolicy2.
Whenuser01logsintoPublicZone,user01willbegovernedunderPolicy1.
Thisisacommoncaseforusersthatcanbeassi
gnedaPolicyindividually.
> ForLocalandRADIUS,iftheseusersarenotassignedunderanyUserPolicyindividually,theywillbegovernedunderthe
samepolicyasotherswithinthesameauthenticationserver.
Forexample,iftheLocalAuthenticationisassignedtoPolicy3,aLocaluser01whenloggedintoPu
blicZonewillgetPolicy3.
ThisisanothercommoncaseforusersthatareassignedPolicybytheauthenticationserver.
> IfaUserisnotassignedaPolicyindividuallyandtheauthenticationserverisalsonotassignedaPolicy,then theGlobal
Policywillbeappliedtoallusers.
Fo
rexample,aLocaluser,user01,isassignedtoNonePolicyandtheLocalAuthenticationisalsoassignedtoNonePolicyonUser
list.Thenuser01loggedintoPublicZonewillbeappliedwiththeGlobalPolicy.
Inconclusion,theGlobalPolicyhasthelowestpolicypriority;theUserPolicyhasthehighestpriority.