Cisco Cisco Aironet 1140 Access Point Prospecto
Note: This test is completed with a random IP address entered directly (here the URL entered is 1.2.3.4)
without the need for translation of a URL through the DNS, because the DNS was not used in the test. In
normal scenarios, the user enters the home page URL, and the DNS traffic is allowed until the client sends the
HTTP GET message to the resolved address, which is intercepted by the AP. The AP spoofs the web site
address, and redirects the client to the login page stored internally.
without the need for translation of a URL through the DNS, because the DNS was not used in the test. In
normal scenarios, the user enters the home page URL, and the DNS traffic is allowed until the client sends the
HTTP GET message to the resolved address, which is intercepted by the AP. The AP spoofs the web site
address, and redirects the client to the login page stored internally.
Once the client is redirected to the login page, the user credentials are entered and verified against the local
RADIUS server, as per the AP configuration. After successful authentication, the traffic that comes from and
goes to the client is fully allowed.
RADIUS server, as per the AP configuration. After successful authentication, the traffic that comes from and
goes to the client is fully allowed.
Here is the message that is sent to the user after successful authentication:
After successful authentication, you can view the client IP information:
ap#show dot11 ass
802.11 Client Stations on Dot11Radio0:
SSID [Guest] :
MAC Address IP address IPV6 address Device Name Parent State
0027.10e1.9880 192.168.10.11 :: ccx−client ap self Assoc