H3C S7500E Series Operation Manual page 890

Operation Manual – Portal
H3C S7500E Series Ethernet Switches
the portal server or predefined free websites to pass, but redirects those destined
for other websites to the portal server. The portal server provides a web page for
the user to enter the username and password.
2) The portal server and the access device exchange Challenge Handshake
Authentication Protocol (CHAP) messages. For Password Authentication Protocol
(PAP) authentication, this step is skipped.
3) The portal server assembles the username and password into an authentication
request message and sends it to the access device. Meanwhile, the portal server
starts a timer to wait for an authentication acknowledgment message.
4) The access device and the RADIUS server exchange RADIUS packets to
authenticate the user.
5) If the user passes authentication, the access device sends an authentication
acknowledgment message to the portal server.
6) The portal server sends an authentication acknowledgment message to the
authentication client to notify it of login success.
7) The portal server sends an affirmation message to the access device.
If EAD is supported, the following two steps are also included:
8) The security policy server exchanges security authentication information with the
client to check whether the authentication client meets the security requirements.
9) The security policy server authorizes the user to access unrestricted resources
based on the security configuration for the user. The authorization information is
stored on the access device and used by the access device to control user access.
II. Re-DHCP authentication process
Portal client Portal client
Figure 1-3 Re-DHCP authentication process
Portal
Portal server
server
Initiate a connection
(1)
Timer Timer
Authentication succeeds
(6)
The user obtains a new
IP address (7)
Notify the user of
login success
(10)
Access
Access device
device
CHAP authentication
(2)
Authentication request
(3)
Authentication
acknowledgement (5) (5)
Discover user IP change
(8)
Detect user IP change
(9)
IP change
acknowledgement (11)
1-6
Chapter 1 Portal Configuration
Authentication
/accounting server
RADIUS
authentication
(4)