After enable MAC address-prioritized Portal authentication, some user cannot reconnect after lock and unlock screen.

View the author · Created Oct 26, 2018 09:28:06

hide the SSID will resolved this issue , thank you for sharing

This post was last edited by GongXiaochuan at 2018-10-30 06:07.

View the author · Created Oct 26, 2018 09:28:33

Thanks for your sharing ,which is a wonderful guidance, i really interested in this article, which is useful for us and improvement product technology and become to a professional engineer .
I hope that you can insist post new kownlege and skills, i will alawys keep an eye on your sharing.

View the author · Created Oct 26, 2018 09:28:43

I have encountered this question about you. I have checked a lot of information, but I still have not answered this question clearly. Thank you for sharing this knowledge and solving my doubts. I hope that you can continue to update such knowledge points. Thank you. !

View the author · Created Oct 26, 2018 09:28:44

why we need this kind of authentication， please check below：

To ensure network security, the enterprise needs to deploy an authentication system to implement access control for all the wireless users who attempt to connect to the enterprise network. Only authenticated users can connect to the enterprise network. Considering the mobility feature of a large number of STAs, the administrator decides to configure Portal authentication on the AC at Layer 3 network to control access. The requirements are as follows:

Users can access only public servers (such as the Portal server, RADIUS server, and DNS server) before passing authentication.
Users can access the Enterprise intranet (such as the issue tracking system) after passing authentication.
Enable MAC address-prioritized Portal authentication to allow users to connect to the wireless network without entering user names and passwords when they move in and out of the wireless coverage area repeatedly within a period (60 minutes for example).
In MAC address-prioritized Portal authentication, when the Portal server needs to authenticate a user terminal, the device first sends the user terminal's MAC address to the Portal server for identity authentication. If the authentication fails, the Portal server pushes the Portal authentication page to the terminal. The user then enters the user name and password for authentication. The RADIUS server caches a terminal's MACaddress and associated SSID during the first authentication for the terminal. If the terminal is disconnected and then connected to the network within the MAC address validity period, the RADIUS server searches for the SSID and MAC address of the terminal in the cache to authenticate the terminal.

This post was last edited by Torrent at 2018-10-31 06:36.

View the author · Created Oct 26, 2018 09:35:49

example：

the sharing of technology enrichs my knowledge and the professional answer is totally right to bring me the new viewpoint.
at the sametime ,it is necessary for me to read the posts. within the posts cuting large amouts of fact meterials, which encourage me to be better.
one hand, i have aquired a large number of skills which is very useful for us and is interesting for us to remember it.
another hand, that a good post which is in network technology contains a lot of excellent experience.
thanks very much for your sharing. we are so happy for your next sharing like this.

View the author · Created Oct 26, 2018 09:37:51

The terms mirrored port, port mirroring, traffic mirroring, and mirroring in this manual are mentioned only to describe the product's function of communication error or failure detection, and do not involve collection or processing of any personal information or communication data of users This post was last edited by littlestone at 2018-10-31 05:48.

View the author · Created Oct 26, 2018 09:55:59

helpful
MAC address authentication is Enabled.

Username format: use MAC address without-hyphen as username

Quiet period is 60s

Authentication fail times before quiet is 1

Offline detect period is 300s

Server response timeout value is 120s

Reauthenticate period is 1800s

Guest user reauthenticate period is 60s

Maximum users: 10240

Current users: 0

Global domain is not configured

View the author · Created Oct 26, 2018 09:57:44

wow learned it how to hide ssid .

1. Other device connect to SSID Test is not allowed, hide this SSID, so other device cannot search and connect to it.

[AC6605-wlan-service-set-Test]dis this

#

forward-mode tunnel

wlan-ess 221

ssid Test

ssid-hide

#

2. For the devices have ever connected to it, delete the SSID on the device.

This post was last edited by Finn92 at 2018-10-31 09:17.

View the author · Created Nov 27, 2018 05:42:16

Another good case

After enable MAC address-prioritized Portal authentication, some user cannot reconnect after lock and unlock screen.

Third Party’s Trade Secret

My Followers

Enterprise

Consumer

Corporate

Carriers

After enable MAC address-prioritized Portal authentication, some user cannot reconnect after lock and unlock screen.

Third Party’s Trade Secret

My Followers