Configuration Guide Configuring Web Authentication
Because more and more application programs run HTTP protocols, the use of the 302 redirection packet may divert a large
amount of HTTP traffic (not sent by browsers) to the portal server, which will affect network authentication. To address this
problem, HTTP redirection technology on the NAS adopts noise reduction to replace the 302 packets with the js script.
Working Principle
Figure 1-1 shows the networking topology of Web authentication.
First-generation Webauth roles:
1. Authentication client: Is usually a browser running HTTP protocols. It sends HTTP requests for accessing the Internet.
2. NAS: Is an access-layer device in a network (for example, a wireless access point [AP] on a wireless network). The
NAS is directly connected to clients and must be enabled with Web authentication.
3. Portal server: Provides a Web page for Web authentication and related operations. After receiving an HTTP
authentication request from a client, the portal server extracts account information from the request, sends the
information to the RADIUS server for authentication, and notifies the client and NAS of the authentication result. Figure
1-1 shows Ruijie ePortal server.
4. RADIUS server: Provides the RADIUS-based authentication service to remote clients. The portal server extracts users'
authentication account information from HTTP packets and initiates authentication requests to the RADIUS server
through the RADIUS protocol. The RADIUS server returns the authentication result to the portal server through the
RADIUS protocol. Figure 1-1 shows the RADIUS server installed with the RG-SAM program.
First-generation Webauth process:
1. Before authentication, the NAS intercepts all HTTP requests from a client and redirects these requests to the iPortal
server. Thereafter, an authentication page is displayed on the browser.
2. During authentication, the client enters information, for example, username, password, and verification code, on the
Webauth URL to interact with the portal server and complete authentication.
3. After the user is authenticated, the portal server notifies the NAS that the client has passed authentication, and the NAS
allows the client to access resources on the Internet.
Figure 1-2 shows the flowchart of Ruijie First-Generation Web Authentication by using an AP as the NAS.
Figure 1-2 Flowchart of Ruijie First-Generation Web Authentication
To Next Page
Loading...
Need help?
General
