Configuration Guide Configuring Web Authentication
 Configuring the SNMP-Server Community String
By default, the SNMP-server community string is not configured.
Run the snmp-server community {community-string} rw command in global configuration mode to configure the
SNMP-server community string.
The SNMP-server community string is configured to read/write user information from/to the NAS.
 Enabling the SNMP Trap/Inform Function
By default, the SNMP Trap/Inform function is disabled.
Run the snmp-server enable traps web-auth command in global configuration mode to enable the SNMP Trap/Inform
function.
The SNMP Trap/Inform function is configured to enable the NAS to inform the portal server of user logout.
1.3.2 Ruijie Second-Generation Web Authentication
HTTP Interception
Same as the HTTP interception technology of Ruijie First-Generation Web Authentication.
HTTP Redirection
Same as the HTTP redirection technology of Ruijie First-Generation Web Authentication.
Working Principle
Figure 1-1 shows the networking topology of Web authentication.
Second-generation Webauth roles:
1. Authentication client: Is usually a browser running HTTP protocols. It sends HTTP requests for accessing the Internet.
2. NAS: Is an access-layer device in a network (for example, an AP on a wireless network). The NAS is directly connected
to clients and must be enabled with Web authentication. The NAS receives user authentication information from the
portal server, sends authentication requests to the RADIUS server, determines whether users can access the Internet
according to authentication results, and returns the authentication results to the portal server.
3. Portal server: Provides a Web page for Web authentication and related operations. After receiving an HTTP
authentication request from a client, the portal server extracts account information from the request, transfers the
information to the NAS, and displays the authentication result returned by the NAS to the user on a page. Figure 1-1
shows Ruijie ePortal server.
4. RADIUS server: Provides the RADIUS-based authentication service to remote clients. Figure 1-1 shows the RADIUS
server installed with the RG-SAM program.
Second-generation Webauth process:
1. Before authentication, the NAS intercepts all HTTP requests from a client and redirects these requests to the iPortal
server. Thereafter, an authentication page is displayed on the browser.
To Next Page
Loading...
Need help?
General
