80
WLAN authentication commands
WLAN is supported only on the MSR954(JH297A/JH298A/JH299A).
The term "AP" in this document refers to MSR routers that support WLAN.
This chapter describes WLAN-specific authentication commands. For more information about
802.1X and MAC authentication commands, see Security Command Reference.
client url-redirect enable
Use client url-redirect enable to enable URL redirection for WLAN clients.
Use undo client url-redirect enable to disable URL redirection for WLAN clients.
Syntax
client url-redirect enable
undo client url-redirect enable
Default
URL redirection is disabled for WLAN clients
Views
Service template view
Predefined user roles
network-admin
Usage guidelines
This command is configurable when the service template is disabled, and it takes effect after the
service template is enabled.
This command takes effect only on clients that use MAC authentication to come online.
A client is allowed to pass MAC authentication only when its credential information (username and
password) and MAC address are recorded on the authentication server. For local MAC
authentication, the authentication server is the access device. For remote MAC authentication, the
authentication server is a RADIUS server.
This command facilitates MAC authentication for a client whose credential information and MAC
address are not recorded on the authentication server. After this command is enabled, the client will
perform Web authentication on the Web interface specified by the redirect URL assigned by the
authentication server. After the client passes Web authentication, the authentication server records
the client's credential information and MAC address. At the same time, the server logs off the client.
At the next MAC authentication attempt, the client can pass MAC authentication.
Examples
# Enable URL redirection for WLAN clients on service template service1.
<Sysname> system-view
[Sysname] wlan service-template service1
[Sysname-wlan-st-service1] client url-redirect enable
client-security authentication fail-vlan
Use client-security authentication fail-vlan to configure an Auth-Fail VLAN for a service template.