Brocade Communications Systems RFS6000 System Reference Manual page 23

HotSpot / IP redirect
A hotspot is a Web page users are forced to visit before they are granted access to the Internet.
With the advent of Wi-Fi enabled client devices (such as laptops and PDAs) commercial hotspots
are common and can be found at many airports, hotels and coffee shops. The hotspot re-directs
the user's traffic on hotspot enabled WLANs to a web page that requires them to authenticate
before granting access to the WLAN. The following is a typical sequence for hotspot access:
1. A visitor with a laptop requires hotspot access at a site.
2. A user ID/ Password and hotspot ESSID is issued by the site receptionist or IT staff.
3. The user connects their laptop to this ESSID.
4. The laptop receives its IP configuration via DHCP.
5. The user opens a Web browser and connects to their home page.
6. The controller re-directs them to the hotspot Web page for authentication.
7.
8. A Radius server authenticates the user.
9. Upon successful authentication, the user is directed to a Welcome Page that lists (among
10. The user agrees to the usage terms and is granted access to the Internet. (or other network
To setup a hotspot, create a WLAN ESSID and select Hotspot authentication from the
Authentication menu. This is simply another way to authenticate a WLAN user, as it would be
impractical to authenticate visitors using 802.1x. For information on configuring a hotspot, see
"Configuring hotspots"
IDM (identity driven management)
Radius authentication is performed for all protocols using a Radius-based authentication scheme
(such as EAP). Identity driven management is provided using a Radius client. The following IDMs
are supported:
•
•
•
Voice prioritization
The controller has the capability of having its QoS policy configured to prioritize network traffic
requirements for associated Clients. Use QoS to enable voice prioritization for devices using voice
as its transmission priority.
Voice prioritization allows you to assign priority to voice traffic over data traffic, and (if necessary)
assign legacy voice supported devices (non WMM supported voice devices) additional priority.
Currently voice support implies the following:
Brocade Mobility RFS6000 and RFS7000 System Reference Guide
53-1001858-01
The user enters their User ID/ Password.
other things) an Acceptable Use Policy.
services).
on page 118.
User based SSID authentication — Denies authentication to Clients if associated to a ESSID
configured differently by their Radius server.
User based VLAN assignment — Allows the controller to extract VLAN information from the
Radius server.
User based QoS — Enables QoS for the Client based on settings within the Radius Server.
Software overview
1
9