Motorola WiNG 5.7.1, System Reference Manual

Page: 673 / 1090

9 - 5
7. Use the AAA Policy drop-down menu to select the Authentication , Authorization and Accounting (AAA) policy used to
validate user credentials and provide captive portal guest access to the network.
If no AAA policies exist, one must be created by selecting the Create icon, or an existing AAA policy can be selected and
modified by selecting the Edit icon. For information on creating a AAA policy, see AAA Policy on page 7-15 .
8. Set the following Access parameters to define captive portal access, RADIUS lookup information and whether the login
pages contain terms that must be accepted before access is granted:
Captive Portal Server
Host When Internal (Self) is selected as the Captive Portal Server Mode , use this field to
provide the host name of the internal captive portal server. When Centralized is selected
as the Captive Portal Server Mode , use the drop down to select either Hostname or IP
Address and provide the appropriate hostname/address of the controller or access point
hosting the captive portal server. When Centralized Controller is selected as the Captive
Portal Server Mode , provide the host name of the captive portal server. A hostname
cannot contain an underscore.
Captive Portal IPv6
Server Set a numeric IP address (non DNS hostname) for the server validating guest user
permissions for the captive portal policy. This option is only available if hosting the captive
portal on an External (Centralized) server resource.
Connection Mode Select either HTTP or HTTPS to define the connection medium. It is recommended to use
HTTPS, as it offers additional data protection HTTP cannot provide. The default value
however is HTTP.
Simultaneous Users Select the check box and use the spinner control to set from 1 - 8192 users (client MAC
addresses) allowed to simultaneously access and use the access point’s captive portal.
Access Type Select the radio button for the authentication scheme applied to wireless clients using the
captive portal for guest access. Options include:
• No authentication required - Clients can freely access the captive portal Web pages
without authentication.
• RADIUS Authentication - An accessing client’s user credentials require authentication
with an external RADIUS resource before access is granted. This is the default setting,
as not all supported access points have an onboard RADIUS server.
• E-mail Access - Clients use e-mail addresses for authenticating on the captive portal.
Optionally set whether the e-mail access requests are RADIUS validated.
• Mobile Access - Mobile client use their device access permissions for captive portal
session access. Optionally set whether mobile access requests are RADIUS validated.
• Others - Use this parameter to configure more details for client access type.
Lookup Information When Others is selected as the access type, provide a 1 - 32 character lookup information
string used as a customized authentication mechanism.
Validate With RADIUS When Others is selected as access type, use this field to validate the information string
with the RADIUS information.
Terms and Conditions
page Select this option (with any access type) to include terms that must be adhered to for
captive portal access. These terms are included in the Terms and Conditions page when
No authentication required is selected as the access type, otherwise the terms appear in
the Login page. The default setting is disabled.