Extreme Networks ExtremeWare XOS 11.1, Руководство пользователя

Страница: 235 / 496

Network Login
ExtremeWare XOS 11.1 Concepts Guide
235
Web-Based Authentication User Login Using Campus Mode
When web-based authentication is used in Campus mode, the user will follow these steps:
1 Set up the Windows IP configuration for DHCP.
2 Plug into the port that has web-based network login enabled.
3 Log in to Windows.
4 Release any old IP settings and renew the DHCP lease.
This is done differently depending on the version of Windows the user is running:
■
Windows 9x —use the
winipcfg
tool. Choose the Ethernet adapter that is connected to the port
on which network login is enabled. Use the buttons to release the IP configuration and renew the
DHCP lease.
■
Windows NT/2000 —use the
ipconfig
command line utility. Use the command
ipconfig/
release
to release the IP configuration and
ipconfig/renew
to get the temporary IP address
from the switch. If you have more than one Ethernet adapter, specify the adapter by using a
number for the adapter following the ipconfig command. You can find the adapter number using
the command
ipconfig/all
.
At this point, the client will have its temporary IP address. In this example, the client should have
obtained the an IP address in the range 198.162.32.20 - 198.162.32.80.
NOTE
The idea of explicit release/renew is required to bring the network login client machine in the same subnet as the
connected VLAN. In Campus Mode using web-based authentication, this requirement is mandatory after every logout
and before login again as the port moves back and forth between the temporary and permanent VLANs. On other
hand in ISP Mode, release/renew of IP address is not required, as the network login client machine stays in the
same subnet as the network login VLAN. In ISP mode, when the network login client connects for the first time, it
has to make sure that the machine IP address is in the same subnet as the VLAN to which it is connected.
5 Bring up the browser and enter any URL as
http://www.123.net
or
http://1.2.3.4
or switch IP
address as http://<IP address>/login (where IP address could be either temporary or Permanent
VLAN Interface for Campus Mode). URL redirection redirects any URL and IP address to the
network login page This is significant where security matters most, as no knowledge of VLAN
interfaces is required to be provided to network login users, as they can login using a URL or IP
address.
A page opens with a link for Network Login.
6 Click the Network Login link.
A dialog box opens requesting a username and password.
7 Enter the username and password configured on the RADIUS server.
After the user has successfully logged in, the user will be redirected to the URL configured on the
RADIUS server.
During the user login process, the following takes place:
●
Authentication is done through the RADIUS server.
●
After successful authentication, the connection information configured on the RADIUS server is
returned to the switch:
■
The permanent VLAN