H3C S7500E Series Operation Manual page 887

Operation Manual – Portal
H3C S7500E Series Ethernet Switches
During
authentication/accounting server, and the security policy server for identity
authentication, security authentication and accounting.
After authentication, allowing users to access the authorized Internet resources.
III. Portal server
Server that listens to authentication requests from portal authentication clients and
exchanges client authentication information with the access device. It provides free
portal services and a web-based authentication interface.
IV. Authentication/accounting server
Server that implements user authentication and accounting through interaction with the
access device.
V. Security policy server
Server that interacts with portal clients and access devices for security authentication
and resource authorization.
The above five components interact in the following procedure:
1) For an unauthenticated user:
When the user enters a website address in the address bar of IE to access the
Internet, an HTTP request is created and sent to the access device, which then
redirects the HTTP request to the web authentication homepage of the portal
server.
When the user uses the portal client software to establish a portal connection, a
TCP/UDP request is created and sent to the access device. When the access
device detects the TCP/UDP request, it sends an authentication packet to the
portal client. An authentication dialog box will then pop up at the client.
2) On the authentication homepage/authentication dialog box, the user enters and
submits the authentication information, which the portal server then transfers to
the access device.
3) Upon receipt of the authentication information, the access device communicates
with the authentication/accounting server for authentication and accounting.
4) If the authentication succeeds:
For a user using IE, the access device allows the user to access the Internet.
For a user using the portal client software, the portal client, access device and
security policy server communicate to check the security status of the client and
determine the access rights of the user.
authentication, interacting
1-3
Chapter 1 Portal Configuration
with the portal server, the