HP 3600 v2 Series Configuration Manual page 143
Hide thumbs
Also See for 3600 v2 Series:
- Command reference manual (510 pages) ,
- Configuration manual (441 pages) ,
- Security configuration manual (398 pages)
Table of Contents
Advertisement
10.
The portal server notifies the authentication client of logon success.
11.
The portal server sends a user IP address change acknowledgment message to the access device.
With extended portal functions, the process includes additional steps:
12.
The security policy server exchanges security check information with the authentication client to
check whether the authentication client meets the security requirements.
13.
Based on the security check result, the security policy server authorizes the user to access certain
resources, and sends the authorization information to the access device. The access device then
controls access of the user based on the authorization information.
Portal support for EAP authentication process
Figure 42 Portal support for EAP authentication process
Authentication
client
1) EAP request
9) Login success
All portal authentication modes share the same EAP authentication steps. The following takes the direct
portal authentication as an example to show the EAP authentication process:
1.
The authentication client sends an EAP Request/Identity message to the portal server to initiate an
EAP authentication process.
2.
The portal server sends a portal authentication request to the access device, and starts a timer to
wait for the portal authentication reply. The portal authentication request contains several
EAP-Message attributes, which are used to encapsulate the EAP packet sent from the
authentication client and carry the certificate information of the client.
3.
After the access device receives the portal authentication request, it constructs a RADIUS
authentication request and sends it to the RADIUS server. The EAP-Message attributes in the
RADIUS authentication request are those carried in the received portal authentication request.
4.
The access device sends a certificate request to the portal server according to the reply received
from the RADIUS server. The certificate request also contains several EAP-Message attributes,
which are used to transfer the certificate information of the RADIUS server. The EAP-Message
attributes in the certificate request are those carried in the RADIUS authentication reply.
Portal server
2) Authentication request
Timer
4) Certificate request
5) EAP response
6) EAP authentication
8) Authentication reply
10) Authentication reply
Access
device
3) RADIUS
authentication
...
...
7) Authentication
success
ACK
Security check
Authorization
130
Authentication/
Security
Accounting server
policy server
Advertisement
Table of Contents
Troubleshooting
