15.3.1.2. Configuring routers

Routers are simple conditional rules (that is, if-then expressions) that determine which instance has to be used to authenticate a particular connection. They consist of a condition and a corresponding instance: if the parameter of the connection matches the set condition, then the authentication is performed with the set instance. The condition consists of a variable and a pattern: the condition is true if the variable of the connection is equal to the specified pattern. Routers can be configured in the Routers section of the Authentication Server MC component. They are evaluated sequentially: if the incoming connection matches a router, authentication is performed according to the instance specified in the router, otherwise the next router is evaluated. Configuring a new router is very simple, only the condition has to be specified and the backend instance selected. The exact procedure is as follows:

  1. Defining new routers

    Figure 15.11. Defining new routers

    Navigate to the Authentication Server MC component, and click New in the Routers section of the tab.

  2. Configuring a new router

    Figure 15.12. Configuring a new router

    Select the instance that will authenticate the connections matching this router from the Target instance combobox.

  3. Defining conditions

    Figure 15.13. Defining conditions

    Click on New, and define a condition for the router. Select the variable to be used from the Variable combobox, and enter the search term to the Value field. If the Variable of the inspected connection matches Value, the instance specified in Target instance will authenticate the connection.

    Currently the following variables can be used to create conditions: Client IP, Client zone, Service, and User.

    Note
    Using multiple conditions in a router

    Figure 15.14. Using multiple conditions in a router

    A router can contain multiple conditions. In this case all specified conditions must be true to select the target instance. (that is, the conditions are connected with logical AND operations.)

Previous Up Next
 Home