Configuring Web Authentication; Overview; Web Authentication Types; Advantages Of Web Authentication - HPE FlexNetwork 10500 Series Security Configuration Manual

Configuring Web authentication

Overview

Web authentication is deployed on Layer 2 Ethernet interfaces of the access device to control user
access to networks. The access device redirects unauthenticated users to the website provided by
the local portal Web server. The users can access the resources on the website without
authentication. If the users want to access other network resources, they must pass authentication.
For more information about the local portal Web server, see

Web authentication types

Web authentication is classified into the following types:
•
Active authentication—Users visit the authentication website provided by the local portal Web
server and enter their username and password for authentication.
•
Forced authentication—Users are redirected to the Web authentication website for
authentication when they visit other websites.

Advantages of Web authentication

Web authentication has the following advantages:
•
Allows users to perform authentication through webpages without installing client software.
•
Provides ISPs with diversified management choices and extended functions. For example, the
ISPs can place advertisements, provide community services, and publish information on the
authentication page.

Web authentication system

A typical Web authentication system consists of four basic components: authentication client, access
device, local portal Web server, and AAA server.
Figure 164 Portal system using the local portal server
Authentication client
Authentication client
An authentication client is a Web browser that runs HTTP.
Access device
An access device refers to a broadband access device such as a switch or a router. An access
device has the following functions:
•
Redirects all HTTP requests of unauthenticated users to the Web authentication page.
•
Interacts with the AAA server to complete authentication, authorization, and accounting.
•
Allows users that pass authentication to access authorized network resources.
Access device
Local portal Web server
592
"Configuring portal
AAA server
authentication."