Development

This commit is contained in:
Matthew Grotke 2026-06-05 02:56:00 -04:00
parent d8ae7b8ce4
commit d55db32667

View file

@ -90,6 +90,13 @@
"label": "DEFAULT Rule Scope",
"client_requirement": "client_is_administrator+",
"items": [
{
"type": "p",
"text": "The DEFAULT Rule only applies to unknown devices (those without a DHCP reservation/authorization)."
},
{
"type": "hr"
},
{
"type": "form",
"action": "/action/radius/default_rule_save",
@ -106,7 +113,7 @@
{"value": "wireless", "label": "Wireless authenticators only (NAS-Port-Type = Wireless-802.11)"},
{"value": "huntgroup", "label": "Wireless authenticators only (AP huntgroup by IP)"}
],
"hint": "Scoping to wireless only prevents the DEFAULT rule from assigning a VLAN to unknown wired switch ports. Huntgroup is more precise but requires AP IPs below."
"hint": "\"Wireless authenticators only\" means that unknown wired devices will be rejected by RADIUS, rather than receive RADIUS authorization for placement onto the fallback VLAN. Your managed switch may have additional policy rules for handling of devices rejected by RADIUS."
},
{
"type": "field",