Previous Topic: Define the Response

Next Topic: Authenticate Users in Heterogeneous RADIUS Environments with One User Directory

Create the Policy

Once you have created the RADIUS Agent, a realm, a rule, and a response, you can bind these components with the RADIUS user directory to create a policy. The policy will protect the RADIUS device.

To create the policy

  1. In the Domain tab, right click Policies and select Create Policies.

    The SiteMinder Policy Dialog box appears.

  2. In the Name field, enter a name for the policy.

    The name cannot contain the characters * or &.

  3. Under the Users tab, add users to or remove users from the policy, by clicking the Add/Remove button.

    Note: For more information about excluding users and defining user directories, see the Policy Design guide.

  4. Under the Rules tab, do the following:
    1. Click the Add/Remove Rules button.

      The Available Rules dialog box appears.

    2. In the Available Members box, select the rule.
    3. Click the left arrow to move it to the Current Members box.
    4. Click OK.

      The Available Rules dialog box closes.

  5. Under the Rules tab, highlight the rule and click the Set Response button.

    The Available Responses dialog box appears.

  6. Select the response you created and click OK.

    The Set Response dialog box closes and the response appears in the Rules tab.

  7. If necessary, add IP Address, time, and active policy restrictions to the policy.

    Note: For more information about these restrictions, see the Policy Design guide.

  8. When the policy is complete, click OK in the SiteMinder Policy dialog box.

    The policy is added to the Policy List. SiteMinder can now be used to authenticate users for the NAS device.