Alcatel-Lucent 6850-48 Guida Di Rete
Configuring Access Guardian
Configuring Captive Portal Authentication
OmniSwitch AOS Release 6 Network Configuration Guide
September 2009
page 34-35
Authenticating with Captive Portal
Access Guardian determines that a client device is a candidate for Web-based authentication if the follow-
ing conditions are true:
ing conditions are true:
• The device is connected to an 802.1x-enabled port.
• An Access Guardian policy (supplicant or non-supplicant) that includes the Captive Portal option is
configured for the port.
• The device is not classified for VLAN assignment by any other policy or method configured for the
port. For example, if a policy specifies Group Mobility and Captive Portal but device frames do not
match any Group Mobility rules, then Access Guardian invokes Captive Portal authentication.
match any Group Mobility rules, then Access Guardian invokes Captive Portal authentication.
When all of the above conditions are met, Access Guardian places the device MAC address in a Captive
Portal state. This means that the switch will not learn the device MAC address and a Web browser session
is required to proceed with the authentication process.
Portal state. This means that the switch will not learn the device MAC address and a Web browser session
is required to proceed with the authentication process.
Note. Captive Portal does not require the configuration of IP interfaces, a UDP Relay agent, or an exter-
nal DHCP server to provide an IP address for the client device. A temporary IP address derived from the
Captive Portal subnet is assigned to the client for use during the authentication process. For more informa-
tion, see
nal DHCP server to provide an IP address for the client device. A temporary IP address derived from the
Captive Portal subnet is assigned to the client for use during the authentication process. For more informa-
tion, see
Logging Into the Network with Captive Portal
Once a user device is in the Captive Portal state, the following steps are required to complete the authenti-
cation process:
cation process:
1 Open a Web browser window on the client device. If there is a default home page, the browser will
attempt to connect to that URL. If a default home page is not available, enter a URL for any website and
attempt to connect to that site. Note that the specified URL must contain the “http”, “https”, or “www”
prefix (see
attempt to connect to that URL. If a default home page is not available, enter a URL for any website and
attempt to connect to that site. Note that the specified URL must contain the “http”, “https”, or “www”
prefix (see
for more information).
A certificate warning message may appear when the Web browser window opens. If so, select the option
to continue on to the website. For example, Windows IE7 browser displays the following message:
to continue on to the website. For example, Windows IE7 browser displays the following message: