Authentication-free Rule Profile

Procedure

• Create a common authentication-free rule.
  1. Choose Configuration > Security Services > AAA Profile Mgmt > Authentication-free Rule Profile. The Authentication-free Rule Profile List page is displayed. The authentication-free rule page is displayed.
  2. Click the authentication-free rule profile default_free_rule.
  3. Set Control mode to Authentication-free Rule.
  4. On Authentication-free Rule List, click Create. The Create Authentication-free Rule page is displayed, as shown in Figure 1.
     Figure 1 Create Authentication-free Rule page
     
     

     Table 1 describes the parameters on the page.

     Table 1 Parameters for creating an authentication-free rule

     Parameter	Description
     Rule ID	ID of an authentication-free rule.
     Source	IP address of a user who can access some resources before being authenticated. - None - All IP address Specified All users can access when Source is set to Authentication-free.
     Source IP address	Source IP address. This parameter is configurable only when the Source is set to Specified.
     Mask	Mask of the source IP address. This parameter is configurable only when the Source is set to Specified.
     VLAN	VLAN ID of source packets. This parameter is configurable only when the Source is set to All IP address or Specified.
     Destination	Destination network resource that a user can access without authentication. - None - All IP address Specified Destination network resource that a user can access without authentication when Destination is set to Authentication-free.
     Destination IP address	Destination IP address. This parameter is configurable only when the Destination is set to Specified.
     Mask	Mask of the destination IP address. This parameter is configurable only when the Destination is set to Specified.
     Protocol type	Protocol used by users to access all destination network resources without authentication. This parameter is configurable only when the Destination is set to Specified.
     Destination port number	UDP or TCP destination port number. This parameter is configurable only when the Destination is set to Specified.

  5. Set the parameters and click OK.
• Modify a common authentication-free rule.
  1. Choose Configuration > Security Services > AAA Profile Mgmt > Authentication-free Rule Profile. The Authentication-free Rule Profile List page is displayed.
  2. Click the authentication-free rule profile default_free_rule. The authentication-free rule page is displayed.
  3. Set Control mode to Authentication-free Rule.
  4. Click the authentication-free rule to modify. The page for configuring the authentication-free rules is displayed.
  5. Modify an authentication-free rule. For description of the parameters, see Table 1.
  6. Click OK.
• Delete a common authentication-free rule.
  1. Choose Configuration > Security Services > AAA Profile Mgmt > Authentication-free Rule Profile. The Authentication-free Rule Profile List page is displayed.
  2. Click the authentication-free rule profile default_free_rule. The authentication-free rule page is displayed.
  3. Set Control mode to Authentication-free Rule.
  4. Select the profile that you want to delete and click Delete. In the Confirm dialog box that is displayed, click OK.
• Create an ACL-defined authentication-free rule.
  1. Choose Configuration > Security Services > AAA Profile Mgmt > Authentication-free Rule Profile. The Authentication-free Rule Profile List page is displayed.
  2. Click the authentication-free rule profile default_free_rule. The authentication-free rule page is displayed.
  3. Set Control mode to ACL, as shown in Figure 2.
     Figure 2 Creating an ACL-defined authentication-free rule
     
     

  4. Click . In the dialog box that is displayed, select an ACL.
  5. Click Apply.
• Display the profile reference relationship.
  1. Choose Configuration > Security Services > AAA Profile Mgmt > Authentication-free Rule Profile. The Authentication-free Rule Profile List page is displayed.
  2. Select the profile of which you want to display the reference relationship and click Display Reference Relationship. The system displays the types and names of the objects that reference the profile.
     

     Click Hide Reference Relationship. The system hides the displayed results.