Configuration Guide Configuring Web Authentication
2. The NAS gets a client offline with traffic lower than the threshold based on the parameters of user online traffic
detection.
3. When the RADIUS server plans to force a client offline based on a certain policy, the NAS notifies the portal server to
push a logout page to the client.
Related Configuration
 Configuring the Second-Generation Webauth Template
By default, the second-generation Webauth template is not configured.
Run the web-auth template{eportalv2 | template-name v2} command in global configuration mode to create a
second-generation Webauth template.
The template is used to implement Web authentication.
 Configuring the IP Address of the Portal Server
By default, the IP address of the portal server is not configured.
Run the ip { ip-address } command in template configuration mode to configure the IP address of the portal server.
Any request packets to access the portal server will be filtered and rate-limited by the NAS.
 Configuring the Webauth URL of the Portal Server
By default, the Webauth URL of the portal server is not configured.
Run the url {url-string } command in template configuration mode to configure the Webauth URL of the portal server.
The URL to which clients are redirected is the address of the Webauth URL provided by the portal server.
 Specifying the Webauth Binding Mode
The default Webauth binding mode is IP-MAC binding mode.
Run the bindmode command in template configuration mode to specify the Webauth binding mode.
In Web authentication on layer-3 networks, the source MAC address in a packet is changed after the packet is routed. In
such case, configure the IP-only binding mode.
 Configuring the Webauth Communication Key
By default, the Webauth communication key is not configured.
Run the web-auth portal key { string } command in global configuration mode to configure the Webauth communication key.
The communication key is used to encrypt URL parameters to avoid information disclosure.
 Enabling Ruijie Second-Generation Web Authentication
By default, Ruijie Second-Generation Web Authentication is disabled.
Run the web-auth enable {eportalv2 | template-name v2} command in interface configuration mode to enable Ruijie
Second-Generation Web Authentication on the client-connected ports.
To Next Page
Loading...
Need help?
General
