Extreme Networks Summit WM User Manual page 186

Table of Contents

Advertisement

WM Access Domain Services configuration
NOTE
Administrators must ensure that the non-authenticated filter allows access to the corresponding authentication
server:
- Internal Captive Portal
- External Captive Portal
Non-authenticated filter examples
A basic non-authenticated filter for internal Captive Portal should have three rules, in the following
order:
Table 15: Non-authenticated filter example A
In
Out
x
x
x
x
x
x
NOTE
For external Captive Portal, an additional rule to Allow (in/out) access to the external Captive Portal authentication/
Web server is required.
If you place URLs in the header and footer of the Captive Portal page, you must explicitly allow access
to any URLs mentioned in the authentication's server page, such as:
Internal Captive Portal - URLs referenced in a header or footer
External Captive Portal - URLs mentioned in the page definition
Here is another example of a non-authenticated filter that adds two more filtering rules. The two
additional rules do the following:
Deny access to a specific IP address.
Allows only HTTP traffic.
Table 16: Non-authenticated filter example B
In
Out
x
x
x
x
x
x
x
x
x
x
186
-
IP address of the WM-AD interface
-
IP address of external Captive Portal server
Allow
IP/Port
x
IP address of default gateway (WM-AD
Interface IP)
x
IP address of the DNS Server
*.*.*.*
Allow
IP/Port
x
IP address of the default
gateway
x
IP address of the DNS Server
[a specific IP address, or
address plus range]
x
*.*.*.*:80
*.*.*.*
Description
Allow all incoming wireless devices access
to the default gateway of the WM-AD.
Allow all incoming wireless devices access
to the DNS server of the WM-AD.
Deny everything else.
Description
Allow all incoming wireless devices access to the default
gateway of the WM-AD.
Allow all incoming wireless devices access to the DNS
server of the WM-AD.
Deny all traffic to a specific IP address, or to a specific
IP address range (such as:0/24).
Allow all port 80 (HTTP) traffic.
Deny everything else.
Summit WM User Guide, Software Version 5.3

Advertisement

Table of Contents
loading

Table of Contents