H3C Technologies H3C Intelligent Management Center - Manual (Page 347)

329
15 Configuring transparent portal
authentication
Transparent portal authentication simplifies the portal authentication process for smart endpoint devices
such as smartphones.
The following describes the workflow of transparent portal authentication:
1. Once an account successfully accesses the network through the portal login page on an endpoint
device, the portal server stores the endpoint MAC address, access user account, and access
service if the following requirements are met:
{
The access user account can be bound with endpoint devices for transparent authentication,
and the number of endpoint devices bound with the account has not exceeded the upper limit
(specified by Max. Smart Device Bindings for Portal).
{
The service assigned to the account is enabled with the Transparent Authentication on Portal
Endpoints option.
{
The port group used by the endpoint device for authentication is configured to support
transparent portal authentication.
{
The HTTP user agent of the endpoint device matches a transparent authentication character.
2. Next time the endpoint device attempts to access the network, the portal gateway and portal
server use the access user account mapped to the endpoint MAC address and automatically
perform portal authentication for the endpoint device. In this process, UAM does not display the
portal login page or require the username and password to be provided.
To implement transparent portal authentication for endpoint devices, complete the following tasks:
• Configure UAM settings and portal devices to support transparent authentication for endpoint
devices.
• Maintain the transparent portal user list for endpoint devices in UAM.
Enabling transparent authentication for portal
endpoints
To enable transparent portal authentication for endpoint devices, complete the following tasks:
• Configure the following transparent authentication settings in UAM:
{
Enable Transparent Authentication on Portal Endpoints in all service configurations that are
assigned or to be assigned to the endpoint devices. For more information, see "
Adding an
access service ."
{
Configure the Max. Smart Device Bindings for Portal parameter for all access user accounts that
endpoint devices use for authentication. Make sure you configure a proper maximum number of
endpoint MAC addresses to be bound to each access user account. Do not select Not Supported
for the parameter. For more information, see " Adding an ordinary access user ."
{
Select Supported for the Transparent Authentication on Smart Devices parameter for all port
groups on each portal device. For more information, see "
Adding a port group ."