6. The portal sends a JSON HTTP request to the controller's northbound interface, which
identifies (based on some parameters) the configured AAA server for this request. It then
sends the authentication request to the AAA server.
7. The AAA server responds with an Access Accept or Access Reject message.
8. If the user was authenticated successfully, the controller's northbound interface sends a
command to the AP to change its state to Authorized, so any further traffic from this UE
will be permitted. The northbound interface also sends a successful response to the portal.
If the portal is an internal portal, a successful message appears to the user and the user
must click the Continue button on the browser page to go to the original URL that he or she
intended to visit. Once logged on to the hotspot, all traffic from the UE is routed directly
through the AP to the Internet, unless tunnel mode is enabled on the WLAN or the user is
using a web proxy.
Alternatively, instead of redirecting the UE after a successful authentication to the original
URL that he or she intended to visit, the portal can be configured to redirect the user to a
different page (for example, if the hotspot is in a shopping mall, the user can be redirected
to the shopping mall home page after he or she clicks the Continue button).
The user has completed the hotspot authentication process and is now able to connect to the
Internet.
NOTE: For users to be able to access the subscriber portal, it must be resolved to the UEs
directly as well as to the controller itself. This is because UEs that use proxy settings are unable
to resolve the subscriber-portal URL directly (but are able to resolve the captive portal). One of
the following alternatives needs to be performed: (1) The DNS server with which users are
associated must resolve the subscriber portal URL. Likewise, the DNS server with which the
controller is associated must resolve the subscriber portal URL. (2) The UEs and the controller
must be associated with the same DNS server and the DNS server must resolve the subscriber
portal URL.
SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide
269
Creating and Managing Hotspots
How Hotspot Authentication Works