The highest frequency of users is used in the WiFi campus, where there are several different settings for teaching buildings, canteens, and dormitories every day."Cybersecurity"But..."This net is a hard one."Seamless Authentication and the roaming experience are key to this. A certification, going all over campus, sounds simple, making a real demand for system capacity.
NatShell V7 Authentication & Billing System design on a non-sense and roaming basis, including MAC NATHELL_SEAMLESS_AUTH, secondary decertification, NETSHELL_SEAML_SAML_AUTH, and cross-regional strategy follow-up based on accounts. These capabilities are aligned with AC ' s cruise mechanism to keep the authentication status of users while moving on campus uninterrupted.
MAC Seamless Authentication RATIONAL AND APPLICATION
The logic behind the MAC NATHHEL_SEAMLESS_AUTH is that, after the first certification by the user, the system records its MAC address and the number of the account. When the terminal reconnects to the network, it automatically recognizes and releases it without having to re-enter the account code.
V7 supports user start-up billing, one-key binding of user MAC addresses, NASIP addresses, VLAN addresses, ACIPs, SSIDs, and clear relationship bindings, with a clear fee starting point. Seamless Authentication requires operators to set the validity date by campus: it is too long for a replacement to bypass certification when using the same device; it is too short for students to re-certification each day, which is bad experience.
Second-level decertification and roaming continuity
In addition to the absence of awareness in MAC, V7 supports secondary exemptions and a second Seamless Authentication: after first authentication by users, when re-accessing during active life, the system automatically judges and exempts from certification. This capability is compatible with multi-area deployment on campuses, where students go to libraries after accreditation in teaching buildings, provided that AC access to new areas is also available directly during active life, without having to re-enter accounts.
Another support for the roaming experience is strategy follow. V7 supports defining user groups based on the words IP, ACIP, ACNAME and linking different user groups to different packages of food strategies; when users move across aAC, permission and billing policies follow the account number rather than the device. The student goes to the area where he/she is located, or the student's menu and bandwidth rules.
Travel restrictions and secure borders
Unconscious and roaming are about to be liberalized, and the travel restrictions are set. The common control capabilities in the Authentication & Billing bidding parameters of the campus include: by login address, VLAN ID, SSID, NAMIP, NASPORT limit account number."I'll lend you the account number.": Accounts can only be entered within bounded or permitted areas and the range is defined by requiring recertification or direct rejection.
V7 supports limiting the flow of accounts to these dimensions, and also supports reoriented to different pages after user certification is passed in different regions.
At the same time, online limits are common requirements in campuses: an account allows simultaneous online terminals (commonly 1-3) to be configured to prevent multi-use number one; and a terminal automatically leaves the line after reaching its set value for hours, with cooperative interest management (e.g. early morning network break strategy for accommodation areas). These strategies can be defined in the system, but it is crucial that operators think about rules.
Multi-producer equipment roaming consistency
The AC/AP of WiFi is often not a single brand, and one sign of the building is common in the dormitory. V7 supports the integration of ACs, BRAS, and gateway equipment to dozens of domestic and foreign manufacturers."It's connected everywhere. No re-certification."。
The integrated management of multiple ACs also means strategic coherence: the configuration, authentication and billing strategies of each AC are sent by a single NATSHEL_AUTH_BILLING system, with managers not having to reconfigure their devices on a desk-by-desk basis. Regional differences are achieved through user group and page matching rules rather than by separate equipment.
The actual effect of the cross-plant cruise depends on the ownership and field configuration of each brand AC."Travel restrictions, regional reorientation"The list of entries, where the location is based on the equipment ' s compatibility, is clearly identified and itemized by type.
The SSID subsector is also part of the roaming experience. The common practice in campuses is to distinguish between students, teachers, visitors, and people on the Internet from SSIDs for different authentication methods and privileges. V7 supports SSID matching certification pages and strategies, with students running their student SSIDs through the student certificate and package, and visitors walking over SSID without disturbing each other. SSID is designed so that users can understand and reduce strategic conflicts when travelling across regions.
After Seamless Authentication has been online, the problems common to daily carriers are concentrated in several categories: individual terminals cannot be automatically authenticated (possibly MAC addresses are occupied or tied abnormally and need to be re-bound); cross-regional authentication failures (perhaps travel restrictions have been too stringent to check permitted limits); no awareness lapses (perhaps expiry date, need to be re-certified). These issues can mostly be used through backstage certification logs and online rapid positioning, which managers are familiar with query paths in the system and are much more effective than rebooting devices when they encounter problems.
NATHHELL_SEAMLESS_AUTH and the roaming experience is the Campus WiFi"It's working."and"It's useless."The system solves only half the time, and the details of the operation are designed together."It's not a problem."。