Prerequisites

1. Oneconnect server configured
2. Utilizing Local user database

Creation: Local user database

Head to: System > Device > Users > Local User database

Proceed to create a local user database by giving it a name.

Then head over to Users under the newly created database and add a new user.

In this example we are adding Tiffany.

The important inhere in order to determine rules for Tiffany is the Groups, Tiffany will in this case be apart of permissions1.

Creating: IP4 Address object with groups

If you followed the previous step you should now have the user Tiffany, if the Local user database she belongs to is used in the OneConnect server she is able to login but still don’t have any specific permissions.

To give Tiffany the permissions we need to create an IP4 Address object that search for those groups shes apart of.

Head to: Objects > General > Address Book

Add >IPv4 Address

In this example we are using the address range 0.0.0.0/0, so she may be assigned any address by the OneConnect server, you may also narrow it down to a single ip or the full range of the OneConnect pool.

Head to the next tab: User Authentication

Now give the object the permissions to look for

Creating: Policy using Tiffanys object

You are now able to set policies for Tiffany,

https://docs.clavister.com/repo/cos-core-administration-guide/doc/Rules.html#IP_policies

Related articles