Ruijie RG-S2900G-E Series, Руководство по настройке

Страница: 568 / 943

Configuration Guide WEB Authentication Configuration
13) Scenario 2: The Portal Server detects the user
’s logout and informs the access device (through
SNMP protocol) and informs the user with a logout page.
14) In the above two scenarios, the Portal Server will send a stop-accounting request to the Radius
Server and notify the Radius Server that the user has logged out.
Protocol Specifications
For HTTP redirection related features, refer to HTTP 1.1 protocol (RFC1945).
For online notification related communication protocols, refer to the SNMP protocols (RFC 1157 and RFC
2578).
Ruijie Second Generation Web Authentication
HTTP Interception
The same as the HTTP interception technology of Ruijie First generation Web Authentication
HTTP Redirection
The same as the HTTP redirection technology of Ruijie First generation Web Authentication
Operating Principle
The networking topology of Ruijie second generation web authentication is the same as that of Ruijie first
generation web authentication (Figure 1).

Roles related to Web authentication:
15) Authentication client: refers to a browser running the HTTP protocol. It sends HTTP requests when
the user uses the browser to access the network.
16) Access device: generally refers to an access layer device (for example, a wireless AP in a WLAN) in
the network topology. It is generally directly connected to
the user’s terminal device, and web
authentication must be enabled on the access device. The access device receives the
authentication information of the user from the Portal server, and sends an authentication request to
the RADIUS server. The access device determines whether the user can access resources of the
Internet based on the authentication results and replies the results to the Portal server.
17) Portal Server: It provides authentication page and related operation for web authentication. When
the Portal server accepts HTTP-based authentication requests sent by the authentication client, it
collects account information and sends it to the access device, and then replies the result to the
user via the page according to the authentication results from the access device.
18) Radius Server: .It provides radius protocol-based authentication of remote users.

Main Web authentication process:
19) Before authentication, the access device blocks all HTTP requests sent by the unauthenticated user
sand redirects the requests to the Portal server. Then, an authentication window pops up in the
user’s browser.