1. Wireless User Association, AC Initiates MAC certification if authentication fails
2. The client obtain ip address and initiates the authentication request through the HTTP protocol.
3.chap (Challenge Handshake authentication Protocol, Challenge Handshake Verification Protocol) authentication interaction between the portal server and the access device.
4.Portal server encapsulates the user name and password entered by the user into the authentication request message sent to the access device.
5. Interaction between the access device and the authentication server for authentication messages.
6. The access device sends the authentication answer message to the Portal server.
7.Portal server sends authentication to the client through the message, informing the client that the authentication was successful.
8.Portal server sends a certification response confirmation to the access device
configuration example
#
radius-server template controller_12.36
radius-server shared-key cipher %^%#}gu$V!77QTf_=E.XK49#cLg'Smo}T!v8mIBwkKz0%^%#
radius-server authentication 12.12.12.36 1812 weight 80
#
aaa
authentication-scheme radius
authentication-mode radius
domain radius
authentication-scheme radius
radius-server controller_12.36
#
#
web-auth-server controller_12.36
server-ip 12.12.12.36
port 50100
shared-key cipher %^%#NL[;Z]3E*(wML.1b2*x'zG\t-\e)$98$R;:Qnh"V%^%#
url http://12.12.12.36:8080/portal
#
portal-access-profile name portal_access_profile
web-auth-server controller_12.36 direct
#
mac-access-profile name mac_access_profile
#
free-rule-template name default_free_rule
free-rule 0 destination ip 8.8.8.8 mask 255.255.255.255
#
authentication-profile name mac_portal
mac-access-profile mac_access_profile
portal-access-profile portal_access_profile
free-rule-template default_free_rule
access-domain radius
#
#
wlan
ssid-profile name mac_portal
ssid mac_portal_129_33
vap-profile name mac_portal
forward-mode tunnel
service-vlan vlan-id 200
ssid-profile mac_portal
authentication-profile mac_portal
ap-group name default
radio 0
vap-profile mac_portal wlan 2
#
