RedPort WXA-153, Руководство пользователя

Страница: 15 / 131

Page 15 of 131
3.4.3 Captive Portal (Crew Internet Access) Enabled
When you ENABLE the Captive Portal (Crew Internet Access), the firewall is automatically
modified to allow data traffic through the router and users must 'authenticate' in order to
access the Internet. You have several methods available for conrolling user access to the
Internet: you can whitelist and/or blacklist hosts and urls; you can modify the firewall and you
can require the use of PIN-Codes. When generating PIN-Codes you can set the amount of data
the user can download, you can limit access to certain hours of the day, and you can limit the
speed of their connection.
Once a user logs in to
the Captive Portal,
data can take one of
three paths:
1. Non-http traffic goes
straight to the Internet:
https, dns lookups, ftp,
ping, scp, etc. The
firewall rules are totally
open so there is
nothing blocking full
access to the Internet.
You can limit access
thru the Captive Portal.
See Chapter 5.1.2 for
details.
2. Traffic to a
Whitelisted Host in the
Captive Portal,
including http, goes
straight to the Internet,
bypassing the internal
proxy server. If you
whitelist a webserver,
that traffic goes
straight to the Internet,
bypassing the internal
proxy server, so there
is no filtering. Typically
you would not want to
whitelist a webserver;
however, you may
want to whitelist a mail server, or a vpn. See Chapter 5.1.1.3 for details.