RayTalk RA-696 - Appendix A. Policy Priority; Global Policy, Authentication Policy and User Policy



AppendixA. PolicyPriority
GlobalPolicy,AuthenticationPolicyandUserPolicy

TheRAYTALKRA‐696supportsmultiplePolicies,includingoneGlobalPolicyand5individualPoliciescanbeassignedtodifferent
AuthenticationServer.GlobalPolicyisthesystem’suniversalpolicyandis appliedto allclients,while otherindividualPolicies
canbeselectedanddefinedtobeappliedtoanyAuthenticationServer.
Forsomeauthentication,suchasLocalandRADIUS,userscanbeassignedtodifferentPoliciesindividually.
Oneusermaybeappliedtoadifferentpolicyatthesametime.
Whichpolicyisactuallyappliedtothisuser?

ThePolicyPriorityisenforcedasfollows:

UserPolicy>>AuthenticationPolicy>>Glob
alPolicy

Now,letusdiscussthedifferentuserpolicytypes:

> ForLocalandRADIUS,userscanbeassignedtodifferentpoliciesindividually.
Forexam ple,aLocaluser,user01,isassignedtoPolicy1andtheLocalAuthenticationPolicy2.
Whenuser01logsintoPublicZone,user01willbegovernedunderPolicy1.
Thisisacommoncaseforusersthatcanbeassi
gnedaPolicyindividually.
> ForLocalandRADIUS,iftheseusersarenotassignedunderanyUserPolicyindividually,theywillbegovernedunderthe
samepolicyasotherswithinthesameauthenticationserver.
Forexample,iftheLocalAuthenticationisassignedtoPolicy3,aLocaluser01whenloggedintoPu
blicZonewillgetPolicy3.
ThisisanothercommoncaseforusersthatareassignedPolicybytheauthenticationserver.
> IfaUserisnotassignedaPolicyindividuallyandtheauthenticationserverisalsonotassignedaPolicy,then theGlobal
Policywillbeappliedtoallusers.
Fo
rexample,aLocaluser,user01,isassignedtoNonePolicyandtheLocalAuthenticationisalsoassignedtoNonePolicyonUser
list.Thenuser01loggedintoPublicZonewillbeappliedwiththeGlobalPolicy.

Inconclusion,theGlobalPolicyhasthelowestpolicypriority;theUserPolicyhasthehighestpriority.
113