Pre-Authentication Rules; Post-Authentication Rules; Figure 73: Authentication Rules - Grandstream Networks GWN7000 User Manual

Redirect External Page
URL Address
Enable HTTPS
In case social media authentication is used, the user needs to allow some traffic between the AP and social
medial platforms (Facebook API as example) to send authentication credentials and receive reply, this traffic
can be allowed using the Authentication rules which are explained below.

Pre-Authentication Rules

Using this option, users can set rules to match traffic that will be allowed for connected WiFi users before
authentication process. This can be needed for example to setup Facebook authentication where some
traffic should be allowed to Facebook server(s) to process the user's authentication. Or simply to be used
to allow some type of traffic for unauthenticated users.

Post-Authentication Rules

On the other hand, post authentication rules are used to match traffic that will be banned for WiFi clients
after authentication. As an example, if you want to disallow connected WiFi clients to issue Telnet or SSH
traffic after authentication then you can set post authentication rules to match that traffic and once a
connected client passes the authentication process they will be banned from issuing telnet and SSH
connections.
Once the landing page is set to redirect to external page, user should set the
URL address for redirecting.
Check to enable/disable HTTPS service.

Figure 73: Authentication rules

GWN7000 User Manual
Version 1.0.6.28
P a g e |
122