Appendix
A
Overview of the Captive Portal
In this chapter:
• Configuring the Captive Portal
• Captive Portal Workflows and VSA
The controller supports tunneling of captive portal user traffic to the 3G/4G/5G core network. During
hotspot authentication, the controller either routes user traffic to the packet core or directly breaks
the traffic out to the Internet, depending on authentication method used by the UE.
Users who are authenticating via the 802.1x method can either be routed to the GGSN or through
local breakout to Internet based on certain configurations. For users authenticated via captive portal,
integration with packet core is not supported and traffic is always routed to Internet from the controller.
By routing traffic directly to the Internet, the operator loses control and visibility over Wi-Fi traffic. Since
the controller does not support Policy and Charging Rule Function (PCRF) integration for retrieving
policy for user and LI integration, QoS and LI cannot be applied to traffic that is directly routed to the
Internet.
Smart Wi-Fi system is an enhancement that allows user traffic integration with GGSN for user
authentication via a captive portal. Multiple schemes are supported for captive portal based
authentication, such as:
• User name and password
• Voucher
• One-time password based on MSISDN
• Creating virtual account and adding credits
Smart Wi-Fi System allows packet core integration for all users irrespective of the authentication
scheme used. Decision to either integrate user traffic to packet core or directly to Internet is based
on the configuration setup.
To establish data traffic tunnel to core network (GGSN/PGW), the controller receives associated IMSI
and MSISDN user identities from the AAA server preconfigured with the required credentials to map
following identifiers:
• User name
• MAC address
• IMSI value
• MSISDN value
SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide
386
Overview of the Captive Portal