Portal System Components - 3Com MSR 50 Series Configuration Manual

1852 C 98: P
HAPTER ORTAL
Portal System
Components
C
ONFIGURATION
Security authentication mechanism is added in addition to portal
■
authentication, which intends to verify anti-virus software is installed, virus
bases are updated, unauthorized software is installed, or OS patches are
updated on access devices;
Compared with identity authentication that users can only access a part of (or
■
restricted) network resources like the virus server or OS patch server after
authentication succeeded, security authentication allows users to access more
(or unrestricted) network resources.
As shown in Figure
authentication client, access device, portal server, authentication/accounting server
and security policy server.
Figure 536 Portal system components
Authentication client
Authentication client
Authentication client
Authentication client
Client system installed on a user terminal:
For portal authentication, an authentication client refers to a host running the
■
hypertext transfer protocol (HTTP) or the secure HTTP (HTTPS).) protocol, or
running portal client software;
For portal+ authentication, an authentication client refers to a host running
■
portal+ client software. This is because the security of the access device is
verified through communications between the portal+ client and the security
policy server.
Access device
Device for broadband access. It can be a switch or router and provides these three
functions:
1 Before authentication:
For portal authentication, redirecting all HTTP requests from the users in the
■
subnet to be authenticated to the portal server so that only authenticated users
can access the Internet;
For portal+ authentication, verifying all TCP/UDP access requests from the users
■
in the subnet to be authenticated, and notifying the portal+ client on access
devices of information about the portal+ server like IP address and port to
facilitate the portal+ client's access to the portal server.
2 During authentication:
536, a typical portal system consists of five basic components:
Access
device
Authentication/accounting
Security policy server
Portal server
server