Black Box LWN600CM-1 Betriebsanweisung PDF herunterladen (Seite 116)

724-746-5500 | blackbox.com

Page 116

724-746-5500 | blackbox.com

Chapter 9: Common Configuration Examples

Self-Registration

The user self-registers by entering data

that can then be saved to a syslog server

for tracking and auditing.

User Authentication

The user submits a

name and password,

which are sent to a

RADIUS server for

authentication.

Both (Auth/Self-reg)

Authentication at the

top and self-registration

at the bottom (the user

submits one of them).

Use Policy

Acceptance

The user must

accept a network

use policy to gain

network access.

Figure 9-7. Four types of registration through a captive Web portal running on a SmartPath AP.

9.3.2 Providing Network Settings

In addition to various registration types, Black Box offers two approaches to providing captive Web portal clients with network

settings.OneapproachusesexternalDHCPandDNSserversonthenetwork,andtheotherusesinternalDHCPandDNSservers

on the SmartPath AP itself.

Captive Web Portal with External DHCP and DNS Servers

With this approach, when the client of a previously unregistered visitor first associates with the guest SSID, the SmartPath AP

allowsDHCPandDNStraffictopassthroughsothattheclientcanreceiveitsaddressandTCP/IPassignmentsandresolvedomain

namestoIPaddresses.ItalsoallowsICMPtrafficfordiagnosticpurposes.However,theSmartPathAPinterceptsallHTTPand

HTTPStrafficfromthatclient—anddropsallothertypesoftraffic—therebylimitingitsnetworkaccesstojusttheSmartPathAP

with which it associated. No matter what website the visitor tries to reach, the SmartPath AP directs the visitor’s browser to a

registration page. After the visitor registers, the SmartPath AP stores the client’s MAC address as a registered user, applies the

appropriateuserprofiletothevisitor,andstopskeepingtheclientcaptive;thatis,theSmartPathAPnolongerinterceptsHTTP

andHTTPStrafficfromthatMACaddress,butallowstheclienttoaccessexternalwebservers.Theentireprocessisshownin

Figure 9-8.

1 2 ... 111 112 113 114 115 116 117 118 119 120 121 ... 191 192

Keine Kommentare

Black Box LWN600CM-1 Betriebsanweisung Seite 116