Providing Network Settings - Black Box SmartPath LWN602A User Manual

Chapter 9: Common Configuration Examples
Self-Registration
The user self-registers by entering data
that can then be saved to a syslog server
for tracking and auditing.
Figure 9-7. Four types of registration through a captive Web portal running on a SmartPath AP.

9.3.2 Providing Network Settings

In addition to various registration types, Black Box offers two approaches to providing captive Web portal clients with network
settings. One approach uses external DHCP and DNS servers on the network, and the other uses internal DHCP and DNS servers
on the SmartPath AP itself.
Captive Web Portal with External DHCP and DNS Servers
With this approach, when the client of a previously unregistered visitor first associates with the guest SSID, the SmartPath AP
allows DHCP and DNS traffic to pass through so that the client can receive its address and TCP/IP assignments and resolve domain
names to IP addresses. It also allows ICMP traffic for diagnostic purposes. However, the SmartPath AP intercepts all HTTP and
HTTPS traffic from that client—and drops all other types of traffic—thereby limiting its network access to just the SmartPath AP
with which it associated. No matter what website the visitor tries to reach, the SmartPath AP directs the visitor's browser to a
registration page. After the visitor registers, the SmartPath AP stores the client's MAC address as a registered user, applies the
appropriate user profile to the visitor, and stops keeping the client captive; that is, the SmartPath AP no longer intercepts HTTP
and HTTPS traffic from that MAC address, but allows the client to access external web servers. The entire process is shown in
Figure 9-8.
Page 120
Both (Auth/Self-reg)
Authentication at the
top and self-registration
at the bottom (the user
submits one of them).
724-746-5500 | blackbox.com
Use Policy
User Authentication
Acceptance
The user submits a
The user must
name and password,
accept a network
which are sent to a
use policy to gain
RADIUS server for
network access.
authentication.