HP 3600 v2 Series Security Configuration Manual page 142

The portal server notifies the authentication client of logon success.
10.
The portal server sends a user IP address change acknowledgment message to the access device.
11.
With extended portal functions, the process includes additional steps:
The security policy server exchanges security check information with the authentication client to
12.
check whether the authentication client meets the security requirements.
Based on the security check result, the security policy server authorizes the user to access certain
13.
resources, and sends the authorization information to the access device. The access device then
controls access of the user based on the authorization information.
Authentication process with the local portal server
Figure 57 Authentication process with the local portal server
With the local portal server, the direct/cross-subnet authentication takes the following procedure:
A portal client initiates authentication by sending an HTTP or HTTPS request. When the HTTP
1.
packet arrives at an access device using the local portal server, it is redirected to the local portal
server, which then pushes a web authentication page for the user to enter the username and
password. The listening IP address of the local portal server is the IP address of a Layer 3 interface
on the access device that can communicate with the portal authentication client.
The access device and the RADIUS server exchange RADIUS packets to authenticate the user.
2.
If the user passes authentication, the local portal server pushes a logon success page to the
3.
authentication client, informing the user of the authentication (logon) success.
131