Hotspot
IX20 User Guide
364
Hotspot authentication modes
During hotspot configuration, you select one the following authentication modesfor the hotspot:
n
Click-through: Requires each user to accept the terms and conditions. The sample HTML page
included with your IX20 device for click-through authentication is terms.html.
See Create a new hotspot for information about configuring hotspot for click-through
authentication.
n
Local shared password: Requireseach user to enter a password. This password is validated
locally on the IX20 device, and the password isthe same for all users. The sample HTML page
included with your IX20 device for local shared password authentication is password.html.
See Configure the hotspot to use local shared password authentication for information about
configuring hotspot for local shared password authentication.
n
RADIUS shared password: Requires each user to enter a password. Thispassword isvalidated
by an external RADIUSserver, and the password is the same for all users. The RADIUS server
should be"white listed" by including it in the Walled garden >Allowed domainsor Walled
garden > Allowed subnetssetting for the hotspot, which allowsunauthenticated hotspot
clients to access the server for authentication. The sample HTML page included with your IX20
device for RADIUSshared password authentication is password.html.
See Configure the hotspot to use RADIUS shared password authentication for information
about configuring hotspot for RADIUS shared password authentication.
n
RADIUS users: Requires each user to enter username and password credentials that are
established on an external RADIUSserver. The credentials are validated by the RADIUSserver.
The RADIUS server should be"white listed" by including it in the Walled garden > Allowed
domainsor Walled garden >Allowed subnetssetting for the hotspot, which allows
unauthenticated hotspot clients to accessthe server for authentication. The sample HTML
page included with your IX20 device for RADIUS shared password authentication is login.html.
See Configure the hotspot to use RADIUSusers authentication for information about
configuring hotspot for RADIUSusers authentication.
n
HotspotSystem: Requires each user to be authenticated by HotspotSystem, a cloud hotspot
service that supportsvariousfree and paid authentication methods, including social media
account, SMS, voucher, and PayPal. Domainsneeded for HotspotSystem authenticatiuon,
payment options, and social media login should be"white listed" by including them in the
Walled garden >Allowed domainsor Walled garden >Allowed subnetssetting for the
hotspot, which allowsunauthenticated hotspot clients to accessthem for authentication.
When HotspotSystem isselected for the authentication mode, the browser is redirected to the
HotspotSystem web page.
See Configure the hotspot to use HotspotSystem authentication for information about
configuring hotspot for HotspotSystem authentication.
Prior to authentication, a hotspot client that attempts to make an HTTPrequest to any domain other
than those included in white-listed sites in the Walled garden >Allowed domainsor Walled garden
>Allowed subnetssettingswill be redirected to the login webpage. HTTPSrequests will time out,
because the hotspot cannot provide a valid SSL certificate for the requested domain. Requests made
via any other protocol will also time out. Most operating systems will detect this scenario and
automatically notify users to open the login page in a web browser.