----- ====== Principles of RADIUSdesk Realms ====== ===== Introduction ===== Realms are a way of grouping users in RADIUS. Since RADIUSdesk is only a front-end for FreeRADIUS, realms are also supported by RADIUSdesk. ===== Realms and usernames ===== * Normally, in RADIUS deployments, you can determine the realm a user belongs to based on the username. * Let us assume we have alice@my_realm.com. We can assume that Alice belongs to the my_realm.com realm. * RADIUSdesk allows you to follow this convention, but also gives you the flexibility to specify a user's email address as their username. * So you can register Alice with her gmail email address as her username. * We can now have the user alice.bodine@gmail.com which is part of the my_realm.com realm. * In RADIUSdesk ALL Vouchers and Permanent Users belongs to one realm. * BYOD devices automatically belong to the realm of the permanent user who owns the device. ===== Clouds and Realms ===== * A cloud can contain zero or more realms. * The cloud thus becomes the owner of the realm. * So if you want an administrator to manage the users of a realm, make sure that they have administrator rights for the cloud under which the realm was created. ===== RADIUS Clients and Realms ===== * If you add a RADIUS client, you have the option of only allowing network access to users from a specific realm (there can be several realms). ===== VLAN and PMK ===== * You may have noticed these two buttons in the toolbar of the realm management applet * This is part of a new feature that is currently being developed and will be released soon.