Authentication And Billing; Ssl Support; Authentication; Aaa Passthrough Port - Nomadix Universal subscriber gateway User Manual

U S
NIVERSAL UBSCRIBER

Authentication and Billing

SSL Support

This feature allows for the creation of an end-to-end encrypted link between the USG
and wireless clients by enabling the Internal Web Server (IWS) to display pages under
a secure link—important when transmitting AAA information in a wireless network
when using RADIUS.
Adding SSL support to the USG requires service providers to obtain digital
certificates from VeriSign™ to create HTTPS pages. Instructions for obtaining
certificates are provided by Nomadix.

Authentication

The USG enables support for port-based authentication using 802.1x and other
authentication methods used by various Smart Clients, while also allowing the secure
passing of authentication parameters through SSL using a Web-based Universal
Access Method (UAM). The USG's advanced security feature enables the support of
a wide variety of authentication methods within the network.
The USG also offers a sophisticated 802.1x/UAM Dual Mode feature that
transparently supports concurrent 802.1x and UAM authentication, using all principal
mechanisms including 802.1x supplicants, OS-driven implementations, Smart
Clients, standard RADIUS logins, PMS, and Credit Card Billing. This comprehensive
new authentication logic means that the previous sequential authentication logic is
now available without any wait time parameters which dramatically improves the
ease of deploying 802.1x in a secure Hot Spot network.
In addition, the USG includes enhanced tracking, billing and security features for
Web-based self-provisioning, including RADIUS Authentication, Authorization and
Accounting (AAA), credit card, and Property Management System (PMS) billing.

AAA Passthrough Port

System administrators can set the USG to passthrough any port (except 80, 1111,
1112, and 2111), without being redirected. Once access to a non-passthrough port
address (for example, search engine) has been requested, the subscriber is then
redirected as usual.
Introduction
G ™
ATEWAY
17