WLAN authentication for users

View the author · Created May 19, 2019 12:20:13

@user_3322753 hi!

You can configure the multi-mode authentication to implement it.

Configuring the MAC address-prioritized Portal authentication allows the detection, if the access users are authenticated by the MAC address authentication server.

If the access user MAC address has been bound to the MAC address authentication server, the user could access the internet.

If the binding entry doesn't exist, the AC/switch will redirect the traffic to the portal authentication server and the traffic will trigger the portal authentication.

After the user has passed the portal authentication, the corresponding entry will be recorded on the MAC authentication server.

After that, if the user accesses the SSID again, the MAC address authentication will be passed,and no more portal authentication is needed.

Here I found some examples, please refer to: https://support.huawei.com/hedex ... ication&lang=en.

View the author · Created May 19, 2019 12:20:13

@user_3322753 hi!

You can configure the multi-mode authentication to implement it.

Configuring the MAC address-prioritized Portal authentication allows the detection, if the access users are authenticated by the MAC address authentication server.

If the access user MAC address has been bound to the MAC address authentication server, the user could access the internet.

If the binding entry doesn't exist, the AC/switch will redirect the traffic to the portal authentication server and the traffic will trigger the portal authentication.

After the user has passed the portal authentication, the corresponding entry will be recorded on the MAC authentication server.

After that, if the user accesses the SSID again, the MAC address authentication will be passed,and no more portal authentication is needed.

Here I found some examples, please refer to: https://support.huawei.com/hedex ... ication&lang=en.

View the author · Created May 21, 2019 06:18:37

In Portal authentication scenarios, STAs are still redirected to the Portal authentication page even after authentication success is displayed on the STAs. This is also called "fake authentication."

Check whether NAT is configured between the authentication server and STAs.
Error-prone configuration: When the AC is connected with the Agile Controller, packets from STAs are translated using NAT before arriving at the Agile Controller. The source IP addresses of the packets are converted into public IP addresses, which cannot be identified by the Agile Controller.
```
# 
url-template name url 
 url-parameter user-ipaddress user-ipaddress  
#
```
Suggestion: Carry the user-ipaddress parameter in the URL when NAT is deployed between the Agile Controller and STAs.

WLAN authentication for users

Recommended answer

Third Party’s Trade Secret

My Followers

Enterprise

Consumer

Corporate

Carriers

WLAN authentication for users

Recommended answer

Third Party’s Trade Secret

My Followers