Filter Policy Configuration Overview
Page 280 7750 SR OS Router Configuration Guide
Web Redirection (Captive Portal)
The 7xx0 Series introduces a new type of redirection policy. Redirection policies were designed
for testing purposes. The new redirection policy can now block a customer’s request from an
intended recipient and force the customer to connect to the service’s portal server. 255 unique
entries with http-redirect are allowed.
Traffic Flow
The following example provides a brief scenario of a customer connection with web redirection.
1. The customer gets an IP address using DHCP (if the customer is trying to set a static IP he
will be blocked by the anti-spoofing filter).
2. The customer tries to connect to a website.
3. The router intercepts the HTTP GET request and blocks it from the network
4. The router then sends the customer a HTTP 302 (service temporarily unavailable/moved).
The target URL should then include the customer’s IP and MAC addresses as part of the por-
tal’s URL.
5. The customer’s web browser will then close the original connection and open a new connec-
tion to the web portal.
6. The web portal updates the ACL (directly or through SSC) to remove the redirection policy.
7. The customer connects to the original site.
To Next Page
Loading...
