Network Policy Constraints Properties

Constraints are additional network policy parameters that are optional. Constraints differ from network policy conditions in one substantial way: when a condition does not match a connection request, NPS continues to evaluate other configured network policies in search of a match for the connection request, but when a constraint does not match a connection request, NPS does not evaluate additional network policies; NPS rejects the connection request and the user or computer is denied network access.

Following are the constraints that you can configure in network policy.

• Authentication methods
  
  Allows you to specify the authentication methods that are required for the connection request to match the network policy.
  
  
• Idle timeout
  
  Allows you to specify the maximum time, in minutes, that the network access server can remain idle before the connection is disconnected.
  
  
• Session timeout
  
  Allows you to specify the maximum amount of time, in minutes, that a user can be connected to the network.
  
  
• Called station ID
  
  Allows you to specify the telephone number of the dial-up server that clients are allowed to use to access the network.
  
  
• Day and time restrictions
  
  Allows you to specify when users are allowed to connect to the network.
  
  
• NAS port type
  
  Allows you to specify the access media types that are allowed for users to connect to the network.