The essence of the network Portal authentication is to insert a "authentic gate" before users actually access it. Many people who have just accessed this mechanism think that Portal page was made by a cell phone or computer themselves, but not. Standard processing links are: customer terminal connections to wireless signals, traffic passes through AP and then to authentication equipment, which transmits requests to Portal server, and lastly accounts checks are completed by Radius Server. The NATHHELL_BRAND V7 Authentication & Billing system plays the role of "deputing whether you have been registered or not and stopping you."
Network Portal AuthenticationWhat happened to the intercept?
When a terminal first connects WiFi to the campus or hotel, its first HTTP request does not go directly to the Internet. The authentication device recognizes that "this terminal has not been certified" and then redirects this visit to Portal login.Network Portal AuthenticationThe biggest difference to a direct release: the terminal can only see login pages before authentication. The end is genuinely connected to the network when users enter mobile phone number identification codes, micromail sweeps or account code on Portal page and Radius Server verifys that the authentication device has passed.
The agreement says:Network Portal AuthenticationInterception and release are based on standard RADIUS: the authentication device sends the certification request as NAS to V7 (a Radius server), verifying that V7 is going back with the release command through a coA or session strategy. This is why V7 can connect dozens of manufacturers. All talk about this language, RADIUS, which is only a mapping of attribute fields. Understanding this, the " popup page " will be distinguished between redirection failure triggers and failure to load log pages themselves.
There is a point that can be easily ignored: the network Portal certification ability relies on authentication equipment and interface between V7. The V7 supports AC and BRAS devices for dozens of companies such as China, Naking, H3C, Sharper, Cisco, and any dynamic IP access, meaning that different NAS devices are connected to the cloudy net when deployed. If the authentication device does not connect with V7, the Portal page cannot be shot or stopped.
Why do network Portal certifications have to be a separate Portal service?
V7 makes Portal certification a stand-alone core functional module, with the advantage that templates can adapt to PCs and mobile phones, displaying them in any way or customized. The web Portal certified login page is not dead, and operators can switch logos, coloring, and file cases. More importantly, Portal services have to carry high volumes.
What happens when network Portal certifies re-orientation?
Portal Server returns the login action, essentially by requesting a 302 redirection of HTTPs to uncertified terminals, and drawing browsers to the authentication URL (with device identification, jumpback parameters) provided by V7. After users enter the voucher, the page returns POST back to V7, V7 and Radius checkup, and then releases it. Understanding this 302, checking " page not popping out " makes a difference between having the redirect not triggered or failing to load the log itself.
After authentication, the V7 record accounts, IPs, downline times and traffic for this session, and can match third-party auditing systems to meet public security requirements. That is, Internet Portal certification is not simply a simple "play page for user login," it is also the starting point for an online behavior mark. If you want to check "how long a person has been on the web one day and how many traffic is used", the source data is the session records generated by this Portal authentication.
There are two more details that can be easily ignored: Portal domain names are to be aligned with the authentication ACL release list, otherwise no authenticating users can access even login pages; Radius is to match the time spent on Portal pages or there will be a odious failure of "the user who has lost the correct account password but has suggested an overtime validation. These two dots appear small, but they are the two most frequently screend on site.
Summing up: Interception and reorientation of the Internet Portal certification is based on AP-to-Certificate device to Portal Server-to Radius server, and V7 interface with the manufacturer's equipment. Understanding where this jump occurred, who was responsible for it, and then checking whether "page popping" or planning was high.