Extreme Networks Altitude 4000 Series, Справочное руководство, Страница: 333 / 521

Configuring Captive Portal Policies
Altitude
TM
4000 Series Access Point System Reference Guide
333
5 Define the following Settings for the captive portal policy:
6 Use the AAA Policy drop-down menu to select the Authentication , Authorization and Accounting
(AAA) policy used to validate user credentials and provide captive portal guest access to the
network.
If no AAA policies exist, one must be created by selecting the Create icon, or an existing AAA policy
can be selected and modified by selected it from the drop-down menu and selecting the Edit icon.
For information on creating a AAA policy that can be applied to a captive portal configuration, see
“AAA Policy” on page 273 .
7 Set the following Access parameters to define captive portal access, RADIUS lookup information and
whether the login pages contain terms that must be accepted before access is granted:
Captive Portal Policy
If creating a new policy, assign a name representative of its access
permissions, location or intended wireless client user base. If editing an
existing captive portal policy, the policy name cannot be modified. The
name cannot exceed 32 characters.
Captive Portal Server
Mode
Set the mode as Internal (Self) , Centralized or Centralized Controller .
Select the Internal (Self) radio button to maintain the captive portal
configuration (Web pages) internally on the access point. Select the
External (Centralized) radio button if the captive portal is supported on
an external server. Select Centralized Controller for the captive portal to
reside on the access point’s connected Virtual Controller AP. The default
value is Internal (Self).
Captive Portal Server
Mode
Lists each hosting mode as either Internal (Self) or External (centralized) .
If the mode is Internal (Self), the access point is maintaining the captive
portal internally, while External (centralized) means the captive portal is
being supported on an external server.
Captive Portal Server
Set a numeric IP address (non DNS hostname) for the server validating
guest user permissions for the captive portal policy. This option is only
available if hosting the captive portal on an External (Centralized) server
resource.
Connection Mode
Select either the HTTP or HTTPS radio button to define the connection
medium. Extreme Networks recommends the use of HTTPS, as is offers
additional data protection HTTP cannot provide. The default value
however is HTTP.
Simultaneous Users
Select the checkbox and use the spinner control to set between 1-8192
users (client MAC addresses) allowed to simultaneously access and use
the access point’s captive portal.
Access Type
Select the radio button for the authentication scheme applied to wireless
clients using the captive portal for guest access. Options include:
No authentication required - Clients can freely access the captive portal
Web pages without authentication.
Generate Logging Record and Allow Access - Access is provided without
authentication, but a record of the accessing client is logged.
Custom User Information for RADIUS Authentication - When selected,
accessing clients are required to provide a 1-32 character data string
used to authenticate the client.
RADIUS Authentication - An accessing client’s user credentials require
authentication with an external RADIUS resource before access is
granted. This is the default setting, as not all supported access points
have an onboard RADIUS server.
RADIUS Lookup
Information
When Custom User Information for RADIUS Authentication is selected as
the access type, provide a 1-32 character lookup information string used
as a customized authentication mechanism.