Admission

Question

What can I do if the message "Failed to obtain a dynamic verification code Try again later" keeps being displayed during SMS authentication.

Answer

Check whether an SMS server is successfully interconnected with the controller. If no SMS server is interconnected with the controller, perform the following steps:

Prerequisites

If a tenant administrator wants to configure an SMS server, the tenant administrator needs to contact the system administrator to configure the SMS platform information. Only the system administrator can configure the SMS platform information.

Procedure

1. Import an SMS server certificate.
   1. Contact the SMS server provider to obtain a certificate file.
   2. Log in to iMaster NCE-Campus as a system administrator and choose System > System Management > Certificate Management from the main menu.
   3. Choose Service Certificate Management from the navigation pane. On the Services page, click CampusBaseServiceServerConfigMoudle.
   4. Click the Trust Certificate tab and click Import. On the displayed page, enter the certificate information, select the desired SMS server certificate, and click Submit to upload the certificate to iMaster NCE-Campus.

2. Choose System > System Settings > Third-Party Service from the main menu and click the SMS Server tab.
3. Select an SMS platform, and set required parameters.

   HTTPS is recommended because it is more secure than HTTP.

   • Set SMS service type to HTTP SMS Service and select fungo from the SMS platform drop-down list box.

   • Set SMS service type to HTTP SMS Service and select twilio from the SMS platform drop-down list box.

   • Set SMS service type to SMPP SMS Service and select the created SMS platform template from the SMS platform drop-down list box.

4. Click Test to verify validity of the SMS message sending function.
   • If the test succeeds, the message "The test succeeds" is displayed, and you can receive the test SMS message from iMaster NCE-Campus.
   • If the test fails, the message "Failed to test the SMS serve" is displayed. Perform operations according to the scenarios:
     • If an error code is displayed in the dialog box, check the product documentation of the SMS service provider for the cause of the error, and obtain the troubleshooting method.
     • If no error code is displayed in the dialog box, contact the system administrator to check the URL specified in the SMS server template to see whether the SMS server is reachable.

5. After the test is successful, click Save.

Follow-up Procedure

If the fault persists after the SMS server is connected, contact Huawei technical support.

Question

How Do I Enable Port 8445 When HTTP Is Used for Portal Authentication in iMaster NCE-Campus V300R019C10SPC205?

Answer

1. Log in to the management plane and check all nodes where ACANginxService is located.

2. Log in to each of the nodes where ACANginxService is located as the sopuser user and switch to the root user. Then, run the following commands:

   Perform this step before enabling port 8445 on the management plane.

   sed -i '/^modify_8445/d' /opt/oss/NCECAMPUS/apps/ACANginxService/bin/modify_out_ip.sh

   sed -i '/valid_referers/amodify_8445' /opt/oss/NCECAMPUS/apps/ACANginxService/bin/modify_out_ip.sh

3. Run the following command to kill the ACANginxService process and restart it.

   ps -ef | grep /etc/aca_nginx/aca_nginx | grep -v grep | awk '{print $2}' | xargs -r kill

Question

URL parameters transmitted between the Portal server and AC need to be encrypted to improve data transmission security. How do I configure URL parameter encryption for Portal authentication?

Answer

You need to enable the AC to transmit encrypted parameters to the Portal server. The following describes the configurations on the AC and iMaster NCE-Campus.

• Configuration on the AC

  Configure the url-template command in the Portal server template view.

  [AC] web-auth-server portal_huawei //Enter the Portal server template view.
  [AC-web-auth-server-portal_huawei] url-template huawei ciphered-parameter-name cpname iv-parameter-name iv-value key cipher Admin@123 //Bind the URL template to the Portal server template and set URL encryption parameters.

  • ciphered-parameter-name: specifies the encrypted parameter name in the URL template.
  • iv-parameter-name: specifies the encrypted initialization vector name in the URL template.
  • key cipher: specifies the encryptioney.

  When the AC transmits parameters to the Portal server, ciphered-parameter-name and iv-parameter-name must be set to cpname and iv-value, and the value of key cipher must be the same as the value of URL Key on the iMaster NCE-Campus. If the parameters are incorrectly set, the Portal server cannot decrypt received parameters. Then, the parameters fail to match Portal page push rules, and pages pushed by the AC cannot be displayed on user terminals.

• Configuration on the iMaster NCE-Campus

  When you add an access control device to the iMaster NCE-Campus, you must configure URL Key after enabling Portal authentication. Besides, the value of URL Key must be the same as the value of key cipher on the AC.

Some Huawei switches and ACs do not support URL parameter encryption. If not, URL Key cannot be configured on the iMaster NCE-Campus. For details on whether a Huawei switch or AC supports URL parameter encryption, see the corresponding device specification.