Motorola Solutions WiNG 5.2.6, Справочное руководство

Страница: 399 / 670

Services Configuration 8 - 7
7. Set the following Access parameters to define captive portal access, RADIUS lookup information and whether the
login pages contain terms that must be accepted before access is granted:
8. Set the following Client Settings to define the duration clients are allowed captive portal access and when they’re
timed out due to inactivity:
9. Use the DNS White List drop-down menu to use a set of allowed destination IP addresses for the captive portal.
These allowed DNS destination IP addresses are called a Whitelist . If no Whitelists exists with the correct set of IP
addresses, select the Create icon (to the right of the drop-down menu) and define a new Whitelist. For more
information, see Setting the Whitelist Configuration on page 8-14 .
Each supported access point model can support up to 32 Whitelists, with the exception of AP-6511 and AP-6521
models which can only support up to 16 Whitelists.
To effectively host captive portal pages on an external Web server, the IP address of the destination Web server(s)
should be in the Whitelist.
10.Refer to the drop-down menu of existing DNS White List entries to select a policy to be applied to this captive portal
policy.
a. If creating a new Whitelist, assign it a name up to 32 characters. Use the + Add Row button to populate the
Whitelist table with Host and IP Index parameters that must be defined for each Whitelist entry.
Access Type Select the radio button for the authentication scheme applied to wireless
clients using the captive portal for guest access. Options include:
No authentication required - Clients can freely access the captive portal
Web pages without authentication.
Generate Logging Record and Allow Access - Access is provided without
authentication, but a record of the accessing client is logged.
Custom User Information for RADIUS Authentication - When selected,
accessing clients are required to provide a 1-32 character data string used
to authenticate the client.
RADIUS Authentication - An accessing client’s user credentials require
authentication with an external RADIUS resource before access is granted.
This is the default setting, as not all supported access points have an
onboard RADIUS server.
RADIUS Lookup
Information When Custom User Information for RADIUS Authentication is
selected as the access type, provide a 1-32 character lookup information
string used as a customized authentication mechanism.
Terms and
Conditions page Select this option (with any access type) to include terms that must be
adhered to for captive portal access. These terms are included in the Terms
and Conditions page when
No authentication required is selected as the
access type, otherwise the terms appear in the Login page. The default
setting is disabled.
Client Access Time Use the spinner control to define the duration wireless clients are allowed
access to the network using the captive portal policy. Set an interval
between 30 - 10,800 minutes. The default interval is 1,440 minutes.
Inactivity Timeout Use the drop-down menu to specify an interval in either Minutes (5 - 30) or
Seconds (300 - 1,800) that, when exceeded, times out clients that have not
transmitted a packet within the captive portal.