Samsung WEC8500 Operation Manual page 438

WEC8500# configure terminal
WEC8500/configure# fqm-mode
WEC8500/configure/fqm-mode # access-list ip preauth permit seq 1 udp any eq * any eq 53
os-aware *
WEC8500/configure/fqm-mode # access-list ip preauth permit seq 2 tcp
255.255.255.255 eq 80 any eq * os-aware *
WEC8500/configure/fqm-mode # access-list ip preauth permit seq 3 tcp any eq *
192.168.20.10 255.255.255.255 eq 80 os-aware *
WEC8500/configure/fqm-mode # access-list ip preauth permit seq 4 tcp
255.255.255.255 eq 80 any eq * os-aware *
WEC8500/configure/fqm-mode # access-list ip preauth permit seq 5 tcp any eq *
90.90.100.120 255.255.255.255 eq 80 os-aware *
WEC8500/configure/fqm-mode # ip access-group wireless preauth
WEC8500/configure/wlan 1/security/layer3# pre-auth-acl preauth
2
WEC8500# configure terminal
WEC8500/configure# wlan 1
WEC8500/configure/ wlan 1# guest-flag
WEC8500/configure/ wlan 1# security
WEC8500/configure/ wlan 1/security# layer3
configure/wlan 1/security/layer3# web-policy authentication
3
WEC8500/configure/security/captive-portal # web-auth
WEC8500/configure/security/captive-portal/web-auth# auth-type external
WEC8500/configure/security/captive-portal/web-auth# external-url
http://90.90.100.120/pc/zero_page.jsp
Configuration using Web UI
1
2
WEC8500/WEC8050 (APC) Operation Manual v10.1
©Samsung Electronics America
PRE-AUTH ACL must have the basic permit rules for the HTTP port to
DNS and web servers.
Configuring WLAN
To configure WLAN, set a guest flag and designate the configuration of
the web policy of Layer 3 as authentication.
Configuring Web Authentication Type
Configuring PreAuthentication ACL
PRE-AUTH ACL must have the basic permit rules for the HTTP port to
DNS and web servers.
Configuring WLAN
To use the Captive Portal function, enable a web policy in Security of
WLAN > L3 tab and select Web Authentication. Designate the pre-set
ACL for Captive Portal as PRE-AUTHENTICATION ACL on the bottom.
Select External for WEB PAGE TYPE, the address of the web page
redirect for URL, and External BYOD for SERVER Type, and then click
192.168.20.10
90.90.100.120
419