Configuration Guide Configuring Web Authentication
Run the port command in template configuration mode to specify the UDP port of the portal server.
The UDP port is specified for the portal server to communicate with the NAS.
1.3.3 Ruijie iPortal Web Authentication
HTTP Interception
Same as the HTTP interception technology of Ruijie First-Generation Web Authentication.
HTTP Redirection
Same as the HTTP redirection technology of Ruijie First-Generation Web Authentication.
Working Principle
Compared with Ruijie First-Generation Web Authentication shown in Figure 1-1, Ruijie iPortal Web Authentication does not
require the portal server.
iPortal Webauth roles:
1. Authentication client: Is usually a browser running HTTP protocols. It sends HTTP requests for accessing the Internet.
2. NAS: Is an access-layer device in a network. It is directly connected to clients in wired or wireless networks and must be
enabled with Ruijie iPortal Web Authentication. The NAS resolves the account information that clients enter on a
Webpage and sends authentication requests to the RADIUS server. It determines whether clients can access the
Internet according to authentication results and pushes the authentication results to the browsers.
3. RADIUS server: Provides the RADIUS-based authentication service to remote clients. Figure 1-1 shows the RADIUS
server installed with the RG-SAM program.
iPortal Webauth process:
1. Before authentication, the NAS intercepts all HTTP requests from a client and redirects these requests to the iPortal
server. Thereafter, an authentication page is displayed on the browser.
2. During authentication, the client enters information, for example, username, password, and verification code, on the
Webauth URL to interact with the iPortal server (NAS).
3. The NAS initiates authentication to the RADIUS server and displays the authentication result (success or failure) to the
client on a page.
Client logout process:
1. The NAS gets a client offline after the Logout button on the Web page is clicked.
2. The NAS gets a client offline with traffic lower than the threshold based on the parameters of user online traffic
detection.
3. When the RADIUS server forces a client offline based on a certain policy, the NAS pushes an logout page to the client.
Related Configuration
 Configuring the iPortal Webauth Template
To Next Page
Loading...
Need help?
General
