1. There are currently wireless networks and access systems within campuses, DHCPs, proxy servers, etc.
2. The campus ' s VIP users have access to the mobile web and charge fees.
3. ViP users need PORTAL NATSHEL_AUTH_BILLING.
The requirements are as follows:
1. Increased Internet authentication for school VIP users.
2. The operator provides a dial-up account for each student account, with 6,000 students on campus and 6,000 dial-up accounts.
3. Students are online, using PORTAL certification but converted to dial-up access via Authentication Gateway.
4. All students are available online, so the issue of pro-agent private connections is not considered.
5. All accounts are mapd to mobile Bras using proxy dial-up on one-on-one, so logs are recorded by The operator ' s Log and the school does not need to consider it.
6. MAC Seamless Authentication does not need to be considered, but each certification requires a 24-hour session and no repeat authentication within 24 hours.
7. Student learning numbers and mobile broadband accounts require matching.
8. All certifications need to be made on campus accreditation platforms, and then through BRAS and Operator AAA docking certification.
The campus certification platform is deployed as follows:
User-access flow diagram
The campus-certified scene and process description:
1. The operator provides 6,000 school accounts for students, which can be dialed to mobile Bras by PPPOE.
2. The school will The number of accounts provided by the operator is imported into the campus certification platform and the corresponding student account number is assigned to each account number, which is a student school number.
3. Step 1: Automatically access DHCP addresses by students connected to the World Health Organization (WHO) when they are online;
4. Step 2: routed through the campus firewall, connecting users to the IP segment of the Internet by NATSHEL_AUTH_GATEWAY;
5. Step 3: Authentication Gateway reoriented access requests from online users to the PORTAL server, ejecting PORTAL pages at user ' s Internet terminals; students entering science numbers and passwords on PORTAL certification page with PORTAL servers challenging NatSHHEL_AUTH_GATEWAY;
6. Step 4: NATSHEL_AUTH_GATEWAY receives challenge information from the PORTAL server and initiates authentication of user names and passwords carried in the challenge message to the RADIUS server; RADIUS performs PORTAL authentication for user information, which is successful by returning dial-up username and password information to Authentication Gateway;
7. Step 5: Upon receipt of dial-up information by NATSHEL_AUTH_GATEWAY, execute proxy dial-up to initiate PPOE dial-up requests using returned dial-up user names and passwords to move to Bras;
8. Step 6: (a) Once the operator ' s Bras receives a dial-up request, it sends the dial-up request to the provincial company AAAA for certification;
9. Step 7: After certification is adopted, the provincial company AAAA returns the certification through information to (a) The operator ' s Bras;
10. Step eight: The operator 's BRAS returns the successful results to Authentication Gateway;
11. Step 9: After the successful certification results are received by NATSHEL_AUTH_GATEWAY, users have access to the Internet as a matter of course.
12. If any authentication is not passed, the user will be rejected at this step and the online authentication returns failed information.