|
2nd-generation Web Authentication Needs to Be Configured on the N18000 and a User Gateway Is Connected to the N18000. How to Configure Web Authentication in a Layer-3 Architecture? |
|
When a user passes Web authentication and goes online successfully, the device needs to write the user entry into forwarding rules and specify a binding mode. The matching mode of forwarding rules can be adjusted to change the Internet access rules of users. For example, when only IP binding is adopted, packets that match the IP address are forwarded and the user can access the Internet. When IP+MAC binding is adopted, only users whose packets match both the IP address and MAC address can access the Internet. In a Layer-3 authentication scenario, MAC addresses contained in packets received by the device are the address of the user gateway rather than the MAC addresses of users. Therefore, the IP binding mode should be adopted. Web authentication is based on IP+MAC binding by default. Users can determine the binding mode according to the accurate user information that can be obtained by the device. When both the IP addresses and MAC addresses of users are accurate, for example, in Layer-2 network deployment, IP+MAC binding is preferred. Otherwise, IP binding is preferred. The configuration reference is as follows: Ruijie(config)#web-auth template eportalv2 //Access the template. Ruijie(config.tmplt.eportalv2)#bindmode ip-only-mode //Change the binding mode to IP binding. Note: IP binding needs to be enabled in the Web template and is not applicable to large gateway scenarios. If the authentication mode is gateway mode, the error "%Error: ip-only-mode can not be used in gateway mode." is displayed after the preceding command is executed. Change the command to the following: Ruijie(config.tmplt.eportalv2)#bindmode ip-mac-mode //Change the binding mode to IP+MAC binding. |
This site contains user submitted content, comments and opinions and is for informational purposes only. Ruijie may provide or recommend responses as a possible solution based on the information provided; every potential issue may involve several factors not detailed in the conversations captured in an electronic forum and Ruijie can therefore provide no guarantee as to the efficacy of any proposed solutions on the community forums. Ruijie disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Ruijie Community Terms of Use.
More ways to get help: Visit Support Videos, call us via Service Hotline, Facebook or Live Chat.
©2000-2023 Ruijie Networks Co,Ltd
Level 4
