H3C Technologies H3C WX6000 Series Access Controllers - Manual (Page 400)

36-4
Figure 36-2 Portal system using the local portal server
A portal system using the local portal server does not support extended portal functions. Therefore,
there is no need to configure any security policy server for it.
The local portal server function of the access device only implements some simple portal server
functions, allowing users to log in and log out through the Web interface. It cannot completely take
the place of an independent portal server.
If you disable portal function on the access interface, the local portal server becomes invalid. Thus,
you also need to remove the local portal server
Protocols used for interaction between client and local portal server
HTTP and HTTPS can be used for interaction between an authentication client and the access device
providing the local portal server function. If HTTP is used, there are potential security problems because
HTTP packets are transferred in plain text; if HTTPS is used, data security is ensured because HTTPS
packets are transferred in ciphertext based on SSL.
Authentication page customization support
The local portal server function allows you to customize authentication pages. You can customize
authentication pages by editing the corresponding HTML files and then compress and save the files to
the storage medium of the device. Each set of customized authentication pages consists of six
authentication pages: the logon page, the logon success page, the online page, the logoff success page,
the logon failure page, and the system busy page. A local portal server will push a corresponding
authentication page at each authentication phase.
Authentication page customization applies to only wireless networking environments. For rules of
customizing authentication pages, refer to Customizing Authentication Pages .
As an access controller (AC) in wireless Layer 3 networking cannot get user SSIDs, the
authentication system can only provide the default authentication pages.
Portal Authentication Modes
Portal authentication supports two modes: non-Layer 3 authentication and Layer 3 authentication.