No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

WLAN Product Interoperation Configuration Guide

Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Defining a Redirection Rule for the Portal Page

Defining a Redirection Rule for the Portal Page

After customizing authentication and registration pages for guests, the administrator defines a redirection rule for the Portal page to ensure that the guests can access the corresponding authentication and registration page.

Prerequisites

The authentication or registration page has been customized.

Context

If guests use different authentication and registration pages, configure a unified Portal page http://server-ip:8080/portal or http://agilecontroller.huawei.com:8080/portal for all users. The Agile Controller-Campus automatically redirects the Portal page to the authentication or registration page based on the defined redirection rule.

The URL using the domain name is recommended for safer and faster. However, you need to configure the mapping between the domain name agilecontroller.huawei.com and the server IP address on the DNS server in advance.

The Agile Controller-Campus supports redirection based on the following authentication information:
  • IP address of the terminal to be authenticated.
  • Information about the access device to be authenticated, for example, MAC address or SSID.

    This information is obtained from the HTTP parameter in the user authentication data.

    The redirection rule needs to be associated with the access device. For details, see Table 1-34.

  • Terminal's operating system type for authentication.
  • Account type for authentication.

    You need to configure the authentication-free function for WeChat accounts and select the corresponding option for public QR codes.

The redirection rules are prioritized. The rule with the highest priority is preferentially matched with the user authentication data. If all configured rules are mismatched, the default rule is used.

Procedure

  1. Choose Policy > Permission Control > Page Customization > Portal Page Push Rule.
  2. Click Add.
  3. Set push rule related parameters.

    Table 1-34  Push rule related parameters

    Parameter

    Description

    Name

    Indicates the name of a Portal page push rule.

    Push conditions

    Specifies the condition for pushing Portal pages, including the time, terminal's IP address segment, self-defined parameter, terminal's operating system type, and account type.

    Self-defined parameters must be the same as those parameters carried in the URL configured on the AC by running the url-parameter command. The command format on the AC is as follows: url-parameter { ac-ip ac-ip-value | ac-mac ac-mac-value | ap-ip ap-ip-value | ap-mac ap-mac-value | ssid ssid-value | sysname sysname-value | user-ipaddress user-ipaddress-value | user-mac user-mac-value | redirect-url redirect-url-value } *
    • ac-ip ac-ip-value: specifies the AC IP address carried in the URL. If required, set ac-ip-value to acip.
    • ac-mac ac-mac-value: specifies the AC MAC address carried in the URL and sets the parameter name.
    • ap-ip ap-ip-value: specifies the AP IP address carried in the URL and sets the parameter name.
    • ap-mac ap-mac-value: specifies the AP MAC address carried in the URL. If required, set ap-mac-value to apmac.
    • ssid ssid-value: specifies the SSID that users associate with carried in the URL. If required, set ssid-value to ssid.
    • sysname sysname-value: specifies the device system name carried in the URL and sets the parameter name.
    • user-ipaddress user-ipaddress-value: specifies the user IP address carried in the URL. If required, set user-ipaddress-value to userip.
    • user-mac user-mac-value: specifies the user MAC address carried in the URL. If required, set user-mac-value to usermac.
    • redirect-url redirect-url-value: specifies the original URL that a user accesses carried in the URL. If required, set redirect-url-value to url.

    For example, if the url-parameter ssid ssid command is configured on the AC, you must set ssid-value to ssid. If users connect to the network through the SSID example, you must set Customized parameters to ssid=example.

    NOTE:
    • For WeChat authentication and public QR code authentication, you must set a value for redirect-url.
    • For WeChat authentication-free, you need to set values for redirect-url and user-mac.
    • In scenarios where guests follow WeChat public account to access Wi-Fi, ssid, redirect-url, and user-mac are mandatory.
    • In area-based guest management scenarios, configure ac-ip, ap-mac, or user-ipaddress based on the device bound to each area.
    • When configure URL parameters in the URL template view on the AC, do not run the parameter { start-mark parameter-value | assignment-mark parameter-value | isolate-mark parameter-value } * command to modify symbols in the URL. If you modify the symbols in the URL, URL resolution on the Agile Controller-Campus may fail, leading to an interconnection failure.

    Push page

    Select a page customized in Customizing Pages.

    First page to push

    Specifies the page to be pushed to a guest for the first time.

    URL

    Use the default value.

    Page displayed after successful authentication

    • No redirect: The authentication success page is displayed after the authentication succeeds.
    • Redirect to the specified address: A specified page is displayed after the authentication succeeds. Set the URL to be switched to in Address.
    • Continue to visit the original page: The original page that the user requests is displayed after the authentication succeeds. You need to configure the url-parameter redirect-url url command in the URL template on the AC or switch. For details, see How Do I Continue to Access the Original Page After Successful Portal Authentication?.

    Description

    -

  4. Click OK.

Example

Configure three redirection rules for the Portal page.

Redirection Rule

Redirected to

Priority (Smaller Value, Higher Priority)

Terminal device type: Android mobile phone

Authentication page A

1

Self-defined parameter: network

Authentication page B

2

Terminal's IP address segment: 10.10.10.10-10.10.10.50

Authentication page C

3

Default rule

Default page

N

A guest uses a laptop to connect to the wireless network network. The laptop's IP address is 10.10.10.20. The guest accesses http://server-ip:8080/portal or or http://agilecontroller.huawei.com:8080/portal and then is redirected to authentication page B for authentication.

Translation
Download
Updated: 2019-03-30

Document ID: EDOC1000113779

Views: 50978

Downloads: 1689

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next