Configuration Guide Configuring Web Authentication
1 Configuring Web Authentication
1.1 Overview
1.1.1 Web Authentication
Web authentication controls user access to networks. It requires no authentication software on clients. Instead, users can
perform authentication on common browsers.
When unauthenticated clients attempt to access the Internet using browsers, the network access server (NAS) forcibly
redirects the browsers to a specified site pointing to a Web authentication server, also called a portal server. Users can
access the services on the portal server before being authenticated, such as downloading security patches and reading
notices. If a user wants to access network resources beyond the portal server, the user must get authenticated by the portal
server through a browser.
Besides providing convenient authentication, the portal server performs Webpage interaction with browsers, providing
personalized services, such as advertisements, notices, and business links on the authentication page.
Ruijie Web
Authentication Versions
There are three versions of Ruijie Web authentication, including Ruijie First-Generation Web Authentication, Ruijie
Second-Generation Web Authentication, and Ruijie Internal Portal (iPortal) Web Authentication. The Web authentication
process varies with authentication versions. For details, see Section 1.3 "Features".
The three versions of Web authentication are highly divergent in features and configurations. It is recommended to read
through the relevant chapters carefully before configuration.
Both Ruijie Second-Generation Web Authentication and Ruijie iPortal Web Authentication support local account
authentication on the NAS. Because Remote Authentication Dial In User Service (RADIUS) authentication is more
commonly used in reality, it is used as an example in the chapter "Applications".
The concept of "interface" varies with product types. For example, the interfaces on a layer-2 switch are physical ports;
the interfaces on a router may be sub interfaces; the interfaces on wireless devices may represent a wireless local area
network (WLAN). This document uses the unified term "interface" to include them. In application, recognize the real
meaning based on specific products and functions.
Web authentication supports user online traffic detection. For details, see the Configuring SCC.
Web authentication supports the authentication of domain names. That is, accounts can be authenticated in the format
of user name@domain name. This requires enabling the domain-name-based authentication, authorization and
accounting (AAA) service. For details, see the Configuring AAA.
Protocols and Standards
To Next Page
Loading...
Need help?
General
