AMIGOPOD PowerConnect W Clearpass 100 Software Integration Manual page 11

Amigopod and ArubaOS Integration
4. The login message instructs the guest user's browser to submit the user credentials directly to
the Aruba controller as a HTTPS POST for authentication processing.
5. When the Aruba controller receives the user credentials, it creates a corresponding RADIUS
session and sends an Access-Request message to the defined Amigopod RADIUS server.
6. The Amigopod processes the Access-Request message by referring to its local database and
optionally any configured proxy authentication servers defined. Any defined authorization rules
are processed at this point.
7. Based on the results of the authentication and authorization processing, the Amigopod responds
with either an Access-Accept or Access-Reject message. If the authentication is successful, the
Access-Accept message contains one or more RADIUS attributes to define the context of the
guest user session. These attributes can include but are not limited to the session duration of the
guest login and the Aruba controller user role that defines the PEF policies and bandwidth
contracts that could be applied to the session. When the Aruba controller receives the Access-
Accept message, it changes the role of the guest user session and their device is permitted
access to the network.
8. If RADIUS accounting has been configured correctly on the Aruba controller, an Accounting-
Start packet is sent to the Amigopod, which defines the beginning of the session statistics for the
guest user.
9. Based on the default interval of [600 seconds] the Aruba controller will provide updates to these
session statistics by sending Interim Accounting update messages to the Amigopod.
10.Based on the Session-Timeout received in the original Access-Accept packet from Amigopod,
the Aruba controller counts down the remaining time that is valid for the current guest user
session. When the time has expired, the controller terminates the session.
11.When the session ends (Session-Timeout, Idle-Timeout, User Logout, Admin Disconnect), the
controller sends a RADIUS Accounting-Stop message to close the session within the Amigopod
accounting database. This stop message includes the final update of the session statistics.
Aruba Networks, Inc.
Application Note
Captive Portal Authentication | 11