TACACS+ Authentication Manager Help >> Operation Guide >> Device User Policy >> Authorization Conditions >> Endpoint IP Group

Endpoint IP Group

An endpoint IP group specifies the range of IP addresses that device users used to access the device. With this function, device users using different IP addresses to access the device can use different policies. Many IP segment can be configured for an endpoint IP group.

Features

• Add Endpoint IP Group
  
  Perform this task to add an endpoint IP group.

  Procedure

  1. Click the User tab, and select Device User Policy > Authorization Conditions > Endpoint IP Group from the navigation tree to open the Endpoint IP Group List page.
  2. Click Add to open the page for adding an endpoint ip group.
  3. Type the name, which must be unique in TAM.
  4. Type the description.
  5. Click Add in the IP Address List area. The Add IP Address dialog box appears.
  6. Type the Begin IP and End IP.
  7. Click OK.
  8. Repeat steps 5 through 7 to add more IP addresses. The effective IP addresses is a combination of all IP address groups you have configured.
  9. Click OK.
• Modify Endpoint IP Group
  
  Perform this task to modify an endpoint ip group.

  Procedure

  1. Click the User tab, and select Device User Policy > Authorization Conditions > Endpoint IP Group from the navigation tree to open the Endpoint IP Group List page.
  2. Click the icon of the target endpoint ip group to open the page for modifying the policy.
  3. Modify the parameters. For more information about the parameters, see Add Endpoint IP Group.
  4. Click OK.
• Delete Endpoint IP Group
  
  Perform this task to delete an endpoint ip group. You cannot delete endpoint ip groups that are used by authorization policies.

  Procedure

  1. Click the User tab, and select Device User Policy > Authorization Conditions > Endpoint IP Group from the navigation tree to open the Endpoint IP Group List page.
  2. Click the icon of the target endpoint ip group. A confirmation dialog box appears.
  3. Click OK.