3Com MSR 50 Series Configuration Manual page 1853

For portal authentication, interacting with the portal server and the
■
authentication/accounting server for identity authentication and accounting.
For portal+ authentication, interacting with the portal server, the
■
authentication/accounting server and the security policy server for identity
authentication, security authentication and accounting.
3 After authentication:
For portal authentication, allowing users to access network resources;
■
For portal+ authentication, allowing users to access authorized part of network
■
resources.
Portal server
Server that listens to authentication requests from portal/portal+ authentication
clients. It provides free portal services and a web-based authentication interface,
and exchanges with the access device the authentication information of
authentication clients.
Authentication/accounting server
Server that implements user authentication and accounting through the
interaction with the access device.
Security Policy Server
Server that interacts with the portal+ client and the access device for security
authentication and authorization against users.
The interaction procedure of the above five components follows:
1 When an unauthenticated user enters a website address in the address bar of the
IE to access the Internet, there are two cases:
For portal authentication, an HTTP request is created and sent to the access
■
device, which then redirects the HTTP request to the web authentication
homepage of the portal server;
For portal+ authentication, the access device verifies the TCP/UDP request
■
packet from the user and sends a force authentication packet to the portal+
client. Then the portal+ client pops up an authentication dialog box for input.
2 On the authentication homepage/authentication dialog box, the user enters and
submits the authentication information. Then the portal server transfers it to the
access device.
3 Upon receipt of the authentication information, the access device communicates
with the authentication/accounting server for authentication and accounting.
4 If the authentication succeeds, the access device establishes a connection between
the user and the Internet so that the user can access the Internet.
For portal authentication, the access device establishes a connection between
■
the user and the Internet so that the user can access the Internet.
For portal+ authentication, the access device interacts with the portal+ client
■
and the security policy server. If the security authentication succeeds, the
security policy server will entitle the user to access unrestricted resources.
Portal Overview 1853