Configuration Guide Configuring Web Authentication
(Mandatory) To enable Ruijie Second-Generation Web Authentication, you must enable AAA.
The NAS is responsible for initiating authentication to the portal server through AAA in Ruijie Second-Generation Web
Authentication.
Configuring the RADIUS-Server Host and Communication Key
(Mandatory) To enable Ruijie Second-Generation Web Authentication, you must configure the RADIUS server.
Clients' account information is stored on the RADIUS server. The NAS needs to connect to the RADIUS server to
validate a client.
Configuring an AAA Method List for Web Authentication
(Mandatory) To enable Ruijie Second-Generation Web Authentication, you must configure an AAA authentication
method list.
An AAA authentication method list associates Web authentication requests with the RADIUS server. The NAS selects
an authentication method and server based on the method list.
Configuring an AAA Method List for Web Accounting
(Mandatory) To enable Ruijie Second-Generation Web Authentication, you must configure an AAA method list for Web
accounting.
An accounting method list is used to associate an accounting method and server. In Web authentication, accounting is
implemented to record client fees.
Configuring the Portal Server
(Mandatory) To enable Ruijie Second-Generation Web Authentication, you must configure and apply the portal server.
When the NAS or convergence device finds an unauthenticated client attempting to access network resources
through HTTP, it redirects the access request to the specified Webauth URL, where the client can initiate authentication
to the portal server. If the IP address of the portal server is configured as a free network resource, unauthenticated
clients can directly visit this IP address through HTTP.
Configuring the Communication Key Between the NAS and Portal Server
(Mandatory) To enable Ruijie Second-Generation Web Authentication, you must configure the key used for the
communication between the NAS or convergence device and portal server.
When the NAS finds an unauthenticated client attempting to access network resources, it redirects the client to the
specified Webauth URL, where the client can initiate authentication to the portal server. During the authentication
process, the communication key is used to encrypt some data exchanged between the NAS and portal server to
improve security.
Configuring the Portal Server in Global or Interface Configuration Mode
(Mandatory) To enable Ruijie Second-Generation Web Authentication, you must specify the use of the second
generation portal server in global or interface configuration mode.
To Next Page
Loading...
Need help?
General
