Users Guide

40 | Monitoring Dell Networking W-ClearPass Policy Manager 6.3 |User Guide
Parameter Description
Change Status The button is enabled only if you use the RADIUS and WebAuth authentication
types. After you click this button, the Access Control Capabilities tab opens. You can
view or change the Access Control Type. Click this button to change the access
control status of a session.
l Agent
This control is available for a session where the endpoint has the OnGuard Agent
installed. The following actions are allowed:
n Bounce
n Send Message
n Tagging the status of the endpoint as Disabled or Known.
l SNMP
This control is available for any session for which Policy Manager has the switch and
port-level information associated with the MAC address of the endpoint. Policy
Manager bounces the switch port to which the endpoint is attached using SNMP.
NOTE: For this type of control, SNMP read and write community strings must be
configured for the network device, and Policy Manager must be configured as an
SNMP trap receiver to receive link up/down traps.
l RADIUS CoA
This control is available for any session where access was previously controlled by a
RADIUS transaction.
NOTE: The network device must be RADIUS CoA capable and RADIUS CoA
enabled, when you configure the network device in Policy Manager. The actions
available depend on the type of device. The Disconnect (or Terminate Section)
action is supported by all devices. Some devices support setting a session timeout,
changing the VLAN for the session, applying an ACL, and so on.
Export Export this transaction and download as a compressed (.zip extension) file. The
compressed file contains the session-specific logs, the policy XML for the
transaction, and a text file containing the Access Tracker session details.
Show Logs Show logs of this session. Error messages are red and Warning messages are
orange.
Close RADIUS response attributes sent to the device.
Table 6:
Request Details Page Control Parameters
Depending on the type of authentication - RADIUS, WebAuth, TACACS, Application - the view might contain different
tabs. A sample of available tabs appears below.
Accounting tab
The Accounting tab is only available for RADIUS sessions. This shows the RADIUS accounting details, including re-
authentication details for the session.
Authorizations tab
The Authorizations tab is only available for TACACS+ sessions. This shows the commands entered at the network
device and the authorization status.