When network Portal authenticates online, the user's biggest complaint is "How to log in every time." It's not about decertification, but on-line.Network Portal AuthenticationAfter the first success, a " post-autonomous" channel is given to users. The knowledge base corresponds to two types of capabilities: secondary decertification (also called Natshell_SEAMLES_AUTH) and MAC, which are both connected with account numbers and MAC bindings, which are wrongly tied and serial numbers, as will be explained below.
Network Portal AuthenticationAnd then, how does the second-time exemption work?
User first passedNetwork Portal AuthenticationThe system records his MAC address and a period of validity. During the lifetime, when this terminal reconnects to the network, AC automatically initiates an Seamless Authentication request to V7. V7 determines that MAC will be released directly during its life span without playing a logout page. This is a second exemption from certification, which is "first time in the login, then no feeling." It is particularly suitable for such cyclical access scenarios as campuses, businesses, hotels, for example, a student who goes back to his dormitory every day and has been largely unconscious after.
The second no-perception opening in V7 is usually: first to enable the MAC unconscious function, then to set user validity (e.g. 30 days on a package), to configure the AC interface with Radius of V7, and then to activate the secondary non-sensual option in the web Portal authentication page template. The order is not disturbed by the Radius docking, followed by the exemption request from certification before it can be sent out; the switch in the template is to decide whether "to grant an exemption after the first success".
How long is the validity period: a classic dilemma
The knowledge base clearly identifies two real, unconscious risk points: too long a life of security risks and too short an experience. For example, one year means that the equipment can be replaced without MAC for a year, in case it is dangerous to lend to others; one day, the user is stopped at least once a day to experience a fall. In practice, it is usually managed on a monthly or scenario-based (for example 30 days) basis, with "user-recertify changes during active life".
What's the difference between MAC's unconscious and secondary exemption?
MAC is more "exact": it is based on the fact that the MAC address itself is unconscious, and does not emphasize "a first Internet Portal authentication". The application scenario is also a fixed user. Note that the knowledge base reminds MAC of its lack of sense based on MAC and validity judgement, safe and manageable in a fixed-user setting, which is not suitable for public hot spots.
How do you get it?
The serial number is a combination of A user sessions that are counted on B or old MAC accounts after the change of equipment. There are several ways to avoid it: first, to confirm when MAC is not aware that AC supports the Radius agreement and interfaces with V7, the authentication request is initiated from the AC side and cannot be declared by the terminal itself; second, to enable secondary innocence options in the web-based Portal certification page template, allowing initial authentication and subsequent release to take the same account line as the account; third, to require a recertification of the equipment during its life cycle, which is written down in the operating rules; and fourth, to regularly check the list of online users, where multiple MAC anomalies are found to be recovered.
A point where the vehicle can be easily turned over: the validity period and the "recertification for replacements" are compatible. If the 30-day validity period is set, no recertification of the equipment is required, the account number may remain in place. The operators regularly check online user lists on the backstage, discover that several strange MACs are being retrieved from the same account, and that the "free certification" is being returned to "accreditation." The three things of validity, binding relationships and recertification of equipment are both available for experience and safety.
The knowledge base also points to a second unsenseable value in the hotel scene: after the last time the guest had stayed in the hotel, repeated visits to and from the lobby, restaurant, room were no longer certified during the stay, experience was near-visibility, and safety remained restricted. This means that secondary non-sense is not exclusive, and any "cyclical return" of fixed crowd scenes are applicable. The key is that the validity period is aligned with the stay cycle, the hotel is set at the number of days of occupancy, accommodation on a monthly basis, office duration.
It should be recalled that both secondary insulation and MAC lack of awareness rely on the MAC for seeding, which relies on “a first Internet Portal certification”, which can open independently; and mix them up to keep them valid so as to avoid a fall-off, resulting in tactical battle.