Overview 151LinksetsA linkset is a set of links that display on the portal page, so that the usercan easily access internal or external web sites, servers, or applications.After the user has been authenticated, the user’s portal page all thelinksets associated with the group to which the user belongs. The user’sportal page also all the linksets associated with the user’s extended profile.When mapping linksets to groups or extended profiles, make sure that theaccess rules specified for the profile do not contradict the links defined forthe linkset.For information about creating and configuring the linksets, see“Configuring linksets” (page 251).For information about mapping the linksets to groups, see “Mappinglinksets to a group or profile” (page 167).SRS ruleThe SRS rule specified for the group is the set of operating system andother software criteria that constitute the host integrity check performed bythe Nortel Health Agent applet. The SRS rule can be a composite of otherrules, but there is only one SRS rule for the group. Each group can havea different SRS rule.You cannot configure SRS rules using the CLI.If you ran the quick setup wizard during the initial setup, you specified theaction to result if the SRS rule check fails. You can rerun the wizard atany time by using the /cfg/doamin #/aaa/nha/quick command. Ifyou want to change the SRS rule check result, use the /cfg/doamin#/aaa/nha/action command (see “Configuring the Nortel Health Agentcheck” (page 92)).Extended profilesPassing or failing the SRS rule check is the only authorization controlprovided at the group level. This is the base profile. In future releases ofthe Nortel SNAS software, extended profiles will provide a mechanismto achieve more granular authorization control, based on specificcharacteristics of the user’s connection. You can define up to 63 extendedprofiles for each group.In Nortel Secure Network Access Switch Software Release 1.6.1, the datafor an extended profile include the following configurable parameters:• linksets• the VLAN which the user is authorized to accessNortel Secure Network Access SwitchUsing the Command Line InterfaceNN47230-100 03.01 Standard28 July 2008Copyright © 2007, 2008 Nortel Networks.
