Managing Location Server Users and Groups
This chapter describes how to configure and manage users, groups, and host access.
This chapter contains the following sections:
•"Managing Groups" section
•"Managing Users" section
•"Managing Host Access" section
Managing Groups
This section describes how to add, delete, and edit user groups.
Adding User Groups
To add a user group to a location server, follow these steps:
Step 1 In Cisco WCS, click Mobility > Mobility Service Engines.
Step 2 Click the name of the location server you want to edit.
Step 3 Click Accounts (left panel) to display the menu options.
Step 4 Click Groups.
Step 5 Select Add Group from the Select a command drop-down menu and click GO.
Step 6 Enter the name of the group in the Group Name field.
Step 7 Select a permission level from the Permission drop-down menu.
There are three permissions levels to choose from:
•Read Access
•Write Access
•Full Access (required for Cisco WCS to access location servers)
Step 8 Click Save to add the new group to the location server.
Caution
Group permissions override individual user permissions. For example, if you give a user full access and add that user to a group with read access, that user will not be able to configure location server settings.
Deleting User Groups
To delete user groups from a location servers, follow these steps:
Step 1 In Cisco WCS, click Mobility > Mobility Service Engines.
Step 2 Click the name of the location server you want to edit.
Step 3 Click Accounts (left panel) to display the menu options.
Step 4 Click Groups.
Step 5 Check the check box(es) of the group(s) that you want to delete.
Step 6 Select Delete Group from the Select a command drop-down menu and click GO.
Step 7 Click OK to confirm that you want to delete the selected group(s).
Changing User Group Name, Password or Permission
To change user group permissions, follow these steps:
Step 1 In Cisco WCS, click Mobility > Mobility Service Engines.
Step 2 Click the name of the location server you want to edit.
Step 3 Click Accounts (left panel) to display the menu options.
Step 4 Click Groups.
Step 5 Click the name of the group you want to edit.
Step 6 Modify the group name, password or permission (access) level as appropriate.
Step 7 Click Save to apply your change.
Caution
Group permissions override individual user permissions. For example, if you give a user full access permission and add that user to a group with read access permission, that user will not be able to configure location server settings.
Managing Users
This section describes how to add, delete, and edit users to location servers. It also describes how to view active user sessions.
Adding Users
To add a users to a location server, follow these steps:
Step 1 In Cisco WCS, click Mobility > Mobility Service Engines.
Step 2 Click the name of the location server you want to edit.
Step 3 Click Accounts (left panel) to display the menu options.
Step 4 Click Users.
Step 5 Select Add User from the Select a command drop-down menu and click GO.
Step 6 Enter the username in the Username field.
Step 7 Enter a password in the Password field.
Step 8 Enter the name of the group to which the user belongs in the Group Name field.
Step 9 Select a permission level from the Permission drop-down menu.
There are three permission levels to choose from: Read Access, Write Access, and Full Access (required for Cisco WCS to access location servers).
Caution
Group permissions override individual user permissions. For example, if you give a user full access permission and add that user to a group with read access permission, that user will not be able to configure location server settings.
Step 10 Click Save to add the new user to the location server.
Deleting Users
To delete a user from a location server, follow these steps:
Step 1 In Cisco WCS, click Mobility > Mobility Service Engines.
Step 2 Click the name of the location server you want to edit.
Step 3 Click Accounts (left panel) to display the menu options.
Step 4 Click Users.
Step 5 Check the check box(e)s of the user(s) that you want to delete.
Step 6 Select Delete User from the Select a command drop-down menu and click GO.
Step 7 Click OK to confirm that you want to delete the selected users.
Changing User Properties
To change user properties, follow these steps:
Step 1 In Cisco WCS, click Mobility > Mobility Service Engines.
Step 2 Click the name of the location server you want to edit.
Step 3 Click Accounts (left panel) to display the menu options.
Step 4 Click Users.
Step 5 Click the name of the group that you want to edit.
Step 6 Make the desired changes to the Password, Group Name, and Permission fields.
Step 7 Click Save to apply your change.
Viewing Active User Sessions
To view active user sessions, follow these steps:
Step 1 In Cisco WCS, click Mobility > Mobility Service Engines.
Step 2 Click the name of the location server you want to edit.
Step 3 Click System (left panel) to display configuration options.
Step 4 Click Active Sessions.
Cisco WCS displays a list of active location server sessions. For every session, Cisco WCS displays the following information:
•Session identifier
•IP address from which the location server is accessed
•Username of the connected user
•Date and time when the session started
•Date and time when the location server was last accessed
•How long the session was idle since it was last accessed
Managing Host Access
This section describes how to add, delete, and edit host access records.
Adding Host Access
You can use Cisco WCS to add host access records to the location server database. Using host access records, you can control which hosts have access to the location server and when. You can also control access preference by assigning priorities to host access.
To add a new host access record, follow these steps:
Step 1 In Cisco WCS, click Mobility > Mobility Service Engines.
Step 2 Click the name of the location server you want to edit.
Step 3 Click Accounts (left panel) to display configuration options.
Step 4 Click Host Access.
Step 5 Select Add Host Access from the Select a command drop-down menu and click GO.
Step 6 Enter the IP address and netmask of the host using the ddd.ddd.ddd.ddd/dd format.
Following are examples of IP address and netmask entries:
|
|
120.10.0.0/8 |
Specifies hosts on a class A subnet (120.x.x.x). |
120.10.0.0/16 |
Specifies hosts on a class B subnet (120.10.x.x). |
120.10.223.0/16 |
Specifies hosts on a class C subnet (120.10.223.x). |
120.10.223.10/32 |
Specifies one host (120.10.223.10). |
Step 7 To allow host access, check the Enable check box of the Permit field.
To deny host access, do not check the Enable check box.
Step 8 Enter a priority number from 0 to 99999 in the Priority field.
Hosts with high priority have access preference over hosts with low priority.
Step 9 Enter the time of day when the host may access the location server in the Start Access fields.
In the Hrs. field, enter a value from 0 to 23. In the Mins. field, enter a value from 0 to 59.
Step 10 Enter the time of day when host access ends in the End Access fields.
In the Hrs. field, enter a value from 0 to 23. In the Mins. field, enter a value from 0 to 59.
Step 11 Click Save to add the new host access to the location server.
Deleting Host Access Records
To delete a host access record, follow these steps:
Step 1 In Cisco WCS, click Mobility > Mobility Service Engines.
Step 2 Click the name of the location server you want to edit.
Step 3 Click Accounts (left panel) to display configuration options.
Step 4 Click Host Access.
Step 5 Check the check box(es) of the host access record(s) that you want to delete.
Step 6 Select Delete Host Access from the Select a command drop-down menu and click GO.
Step 7 Click OK to confirm that you want to delete the selected host access records.
Editing Host Access Records
To edit a host access record, follow these steps:
Step 1 In Cisco WCS, click Mobility > Mobility Service Engines.
Step 2 Click the name of the location server you want to edit.
Step 3 Click Accounts (left panel) to display configuration options.
Step 4 Click Host Access.
Step 5 Click the IP and mask address of the host access record that you want to modify.
Step 6 Make the required changes to the Permit, Priority, Start Access, and End Access fields.
Step 7 Click Save to apply your changes.