HP VSR1000 Security Configuration Manual page 75

Figure 19 Portal system components
Authentication client
Authentication client
Authentication client
Authentication client
An authentication client is a Web browser that runs HTTP/HTTPS or a user host that runs a portal client
application. Security check for the user host is implemented through the interaction between the portal
client and the security policy server.
Access device
An access device refers to a broadband access device such as a switch or a router. An access device has
the following factions:
• Redirects all HTTP requests of unauthenticated users to the portal Web server.
Interacts with the portal authentication server and the AAA server to complete authentication,
•
authorization, and accounting.
Allows users that pass portal authentication to access authorized Internet resources.
•
Portal authentication server
The portal authentication server receives authentication requests from authentication clients and interacts
with the access device to authenticate users.
Portal Web server
The portal Web server pushes the Web authentication page to authentication clients and forwards user
authentication information (username and password) to the portal authentication server. The portal Web
server can be integrated with the portal authentication server or an independent server.
AAA server
The AAA server interacts with the access device to implement authentication, authorization, accounting
for portal users. Now only a RADIUS server can serve as an AAA server in a portal system.
Security policy server
The security policy server interacts with the portal client and the access device for security check and
authorization for users.
Access device
65
Portal authentication
server
Portal Web server
AAA server
Security policy
server