Дерево страниц

Сравнение версий

Ключ

  • Эта строка добавлена.
  • Эта строка удалена.
  • Изменено форматирование.

...

  1. Create a whitelist of URLs, it can contain URLs and/or RegExp. Access to the specified addresses will be allowed before authorisation.

    Блок кода
    object-group url white_url
      url eltex-co.ru
      regexp '(.+\.)eltex-co\.com'
    exit


  2. Create a whitelist of IP addresses, access to the specified addresses will be allowed before authorisation. You can It is possible to add to the whitelist the addresses of subnets that are required for authorisation.

    Блок кода
    object-group network white_ip
      ip prefix 192.168.0.0/24
    exit


  3. Create portal-profile.

    Parameters description:
    redirect-url – portal address;
    age-timeout – the time interval during which the access point "remembers" the client and does not perform MAB authorisation;
    verification-mode – portal operation mode;
    white-list domain  – URL whitelist;
    white-list address – IP addresses whitelist.

    Блок кода
    wlc
      portal-profile portal-pr
        redirect-url https://eltex-co.ru
        age-timeout 10
        verification-mode external-portal
        white-list domain white_url
        white-list address white_ip 
      exit
    exit


    Информация

    With verification-mode external-portal, parameters are automatically added to the specified URL in redirect-url so that the resulting URL has the form:

    Блок кода
    https://eltex-co.ru/?switch_url=<SWITCH_URL>&ap_mac=<AP_MAC>&client_mac=<CLIENT_MAC>&wlan=<SSID>&redirect=<ORIGINAL_URL>

    If the names of the parameters switch_url, ap_mac, client_mac, wlan, redirect need to be changed, it is possible to specify the line yourself through the parameter redirect-url-custom, for example:

    Блок кода
    redirect-url-custom https://eltex-co.ru/?action_url=<SWITCH_URL>&ap_addr=<AP_MAC>&client_addr=<CLIENT_MAC>&ssid_name=<SSID>&red_url=<ORIGINAL_URL>&nas=<NAS_ID>

    In the example <NAS_ID> was added to the line and the following parameter names were changed:

    • switch_url → action_url
    • ap_mac → ap_addr
    • client_mac → client_addr
    • wlan → ssid_name
    • redirect → red_url

    The redirect line may contain placeholders: 

    • <NAS_ID>
    • <SWITCH_URL>
    • <AP_MAC>
    • <CLIENT_MAC>
    • <SSID>
    • <ORIGINAL_URL>


  4. Create radius-profile.

    Блок кода
    wlc
      radius-profile portal_radius
        auth-address 192.168.4.5
        auth-password ascii-text encrypted 92BB3C7EB50C5AFE80
        auth-acct-id-send
        acct-enable
        acct-address 192.168.4.5
        acct-password ascii-text encrypted 92BB3C7EB50C5AFE80
        acct-periodic
        acct-interval 300
      exit
    exit

    Scroll Pagebreak

  5. Create ssid-profile.

    Блок кода
    wlc
      ssid-profile portal_test
        ssid portal_test
        radius-profile portal_radius
        portal-enable
        portal-profile portal-pr
        vlan-id 3
        band 5g
        enable
      exit
    exit


  6. Add ssid-profile to ap-location. 

    Блок кода
    wlc
      ap-location default-location
        description default-location
        mode tunnel
        ap-profile default-ap
        ssid-profile portal_test
      exit
    exit


...

Drawio
bordertrue
viewerToolbartrue
fitWindowfalse
diagramNamewlc_ap_portal
simpleViewerfalse
width
diagramWidth1294
revision12

Scroll Pagebreak