NxFilter - User automanage

[vinz]

Hi, I am new to NxFilter and I want to use it cause allows you to identify users via RADIUS, which is essential for my organization since the users have Dynamic IP and they authenticate itselfs through RADIUS server.

Now I would like to add the function for my users to disable or enable the filter (changing their policy) independently, I can't use NxCloud - with the paradigm of Admin>Operator>User - beacuse it doesn't support RADIUS authentication for the operators, do you have any tips? Maybe I'm missing something...

Edit: I've seen NxRelay but I'm not sure it will help me

Thanks in advance

[support200]

What do you mean by 'the function for my users to disable or enable the filter '? You allow your users to enable/disable filtering by themseleves?

[vinz]

Thanks to the immediate response.
You're right, it may seem like a paradox.
The fact is that in my architecture each user authenticated via RADIUS corresponds to a private network, the owner of the network may want to change policy and I want him to be able to do it independently.
A kind of NxCloud in which the Operators are all those logged in via the RADIUS server.
I hope I was clearer this time.

[support200]

I guess you run NxFilter on cloud but in that case, it doesn't see the private IPs behid a router. I don't think RADIUS works in that case.

[vinz]

Now RADIUS catch all the user pppoe of routers and the relative ip but obviously not those who are behind the router (private IPs), btw it is not important for me...

I only want that all the RADIUS users can enable/disable filtering by themseleves.
Maybe I have to build a personalized page and handle this function through the DAO?

[support200]

If you treat whole network as one user then try Login Page. Create another user with another policy bypassing all and set password to the user and let the users go through the login page of NxFilter when they need to disable filtering.

But they need to go through the login page again when they need to re-enable filtering so you need to set password for their radius username as well.

[support200]

If you use Login Page then you may not need RADIUS. After they switch user account if it gets RADIUS request again then it will be switched to the RADIUS account again. So, it's better to use only the authentication by login page.