3Com MSR 50 Series Configuration Manual page 1856

1856 C 98: P
HAPTER ORTAL
C
ONFIGURATION
5 The access device sends an authentication acknowledgment message to the portal
server.
6 The portal server sends an authentication success message to the authentication
client to notify it of login success.
7 The portal server sends an authentication acknowledgment affirmation message
to the access device.
For portal+ authentication, in addition to above mentioned steps, the process
includes:
8 The client and the security policy server exchange security information. The
security policy server verifies the security of the access device, for example,
whether anti-virus software is installed, whether virus bases are updated, whether
unauthorized software is installed, or whether OS patches are updated.
9 The security policy server authorizes the user to access unrestricted resources by
security level. The authorization information is stored on the access device and
used by the access device to control user access.
Re-DHCP authentication process
Figure 538 Re-DHCP authentication process
Portal client Portal client
Initiate a connection
(1)
Authentication succeeds
(6)
The user obtains a new
IP address (7)
Notify the user of
login success
(10)
For portal authentication, the re-DHCP authentication process is as follows:
Step 1 through step 6 are the same as those in the direct authentication/Layer 3
portal authentication process.
10 After receiving an authentication success message, the authentication client
obtains a new public IP address through DHCP and notifies the portal server that it
has obtained a public IP address.
11 The portal server notifies the access device that the authentication client has
obtained a new public IP address.
Portal Access
Portal server Access device
server device
CHAP authentication
(2)
Authentication request
(3)
Timer Timer
Authentication
acknowledgement (5) (5)
Discover user IP change
(8)
Detect user IP change
(9)
IP change
acknowledgement (11)
Security authentication (12)
Authorization (13)
Authentication
Security policy
/accounting server
RADIUS
authentication
(4)
Security
policy
server
server