Ruijie RG-WLAN Series User Manual

Configuration Guide Configuring Web Authentication
Deployment
 Enable Web authentication on the client-accessed interface or globally on the NAS (globally on EG devices).
 Configure the ePortal server and the communication key on the NAS (for only Ruijie First-Generation and
Second-Generation Web Authentication).
 Configure the Simple Network Management Protocol (SNMP) communication parameters of the ePortal server on the
NAS (for only Ruijie First-Generation and Second-Generation Web Authentication).
 Configure the consistent communication parameters on the ePortal server and SAM server (for only Ruijie
First-Generation Web Authentication).
 Create user accounts on the SAM server.
 Configure AAA and method lists on the NAS (for only Ruijie Second-Generation and iPortal Web Authentication).
 Configure the IP address of the SAM server on the NAS (for only Ruijie Second-Generation and iPortal Web
Authentication).
 Configure the names of the Web authentication method lists on the NAS (for only Ruijie Second-Generation and iPortal
Web Authentication).
1.3 Features
Basic Concepts
 Ruijie First-Generation Web Authentication
Ruijie First-Generation Web Authentication should cooperate with the RG-ePortal software. The server installed with
RG-ePortal provides a login page to submit user authentication information, and initiates an authentication request to the
RADIUS server directly. After authentication succeeds, the NAS gets user information delivered through the SNMP protocol,
and thereby controls user access permissions. Communication during Web authentication of this version depends on private
SNMP nodes. Moreover, the ePortal server takes the place of the NAS in authentication and accounting, which relieves the
NAS from service burden.
 Ruijie Second-Generation Web Authentication
Ruijie Second-Generation Web Authentication complies with the CMCC WLAN Service Portal Specification. The portal
server is responsible only for Webpage interaction with users. The NAS interacts with the RADIUS server to implement
authentication. The interaction between the portal server and the NAS complies with the CMCC WLAN Service Portal
Specification. The portal server provides a login page for users to submit their information, and informs the NAS of user
information through the portal protocols. The NAS completes authentication by interacting with the RADIUS server based on
the user information, assigns access permissions to authenticated clients, and returns authentication results to the portal
server.
The implementation process of Ruijie Second-Generation Web Authentication is mainly completed on the NAS. This raises a
higher demand on the NAS's capability to handle heavy tasks. Meanwhile, the portal server is simplified. The standard

Ruijie RG-WLAN Series Specifications

General

Brand	Ruijie
Model	RG-WLAN Series
Category	Wireless Access Point
Language	English