SMC Networks SMCWHSG44-G manual Configuring User Authentication Settings, Web Redirection

Page 33

The number of available RF channels depends on local regulations; therefore you have to choose an appropriate regulatory domain to comply with local regulations. The SSID of a wireless client computer and the SSID of the wire- less Hotspot gateway must be identical for them to communicate with each other.

Note: SMCWHSG44-Gs sold in North America and EMEA are already configured to FCC and ETSI domain respectively, and the domain settings are not able to be changed.

1.8.6. Configuring User Authentication Settings

The SMCWHSG44-Gsupports both Web redirection-based and non-802.1x- based user and IEEE 802.1x-based user authentication.

NOTE: If both web redirection and IEEE 802.1x are enabled, the authentication process is 2-phase. In the first phase, IEEE 802.1x is tried and in the second phase, Web redirection is tried. A user, who fails in the first phase or uses a computer that does not support IEEE 802.1x, is given a second chance. In this way, the SMCWHSG44-Gcan serve both IEEE 802.1x-enabled and IEEE 802.1x-disabled wireless users.

1.8.6.1. Web Redirection

If you want to do Web redirection-based user authentication, go to the AAA\Web Redirection section for configuration. There are three combinations for Web Redirection and Authentication method:

1.Enabled with Authentication - Enable both Web-Redirection and user Authentication mechanism.

Fig. 19. Web Redirection Settings - Enable with Authentication

Encryption Method:

401 Authorization : Logon page on Pop-up window.

CGI with Plain Code: Logon page on web browser, username/password without encryption (plain text).

CGI with Base64: Logon page on web browser, username/password with Base64 encryption.

CGI with SSL: Logon page on web browser, username/password with SSL encryption.

32

Image 33
Contents SMCWHSG44-G Page Trademarks CopyrightLimited Warranty Page Federal Communication Commission Interference Statement FCC Radiation Exposure StatementIndustry Canada Class B EC Conformance Declaration Power Cord Safety Safety ComplianceSchuko Page Wichtige Sicherheitshinweise Germany Schuko Page Table of Contents System Page SMCWHSG44-G SMCWHS-POS Introduction Overview Features User Authentication, Authorization, and Accounting AAAIeee 802.11b/g Compliant Wireless Operation Internet Connection Sharing Network Security Firmware Tools Package Checklist LED DefinitionRear Panel POE enabled LAN Port Position Selecting a Power Supply MethodMounting the SMCWHSG44-G on a Wall Changing the TCP/IP Settings of the Managing Computer Preparing for ConfigurationEntering the Password Configuring the SMCWHSG44-GHome Setup Wizard Selecting an Operational ModePage Router with a Static-IP DSL/Cable Connection Router with a DHCP-Based DSL/Cable ConnectionRouter with Multiple DSL/Cable Connections Setup Wizard Configuring Ieee 802.11 Settings Setup Wizard Configuring Dhcp Server SettingsWeb Redirection Configuring User Authentication SettingsAuthentication protocol Local Authentication SeverPage Account Table List How to Setup the Mini-POS Ticket PrinterIeee Radius Settings Allowable Authentication Modes Configuring Radius SettingsDeploying the SMCWHSG44-G Setting up Client ComputersConfiguring Ieee 802.11-Related Settings To establish a wireless link to an APConfiguring TCP/IP-Related Settings Page Authentication Success Overview Menu StructureLogout Page Save, Save & Restart, and Cancel Commands Home and Refresh CommandsStatus Associated Wireless Clients Account Table Authenticated UsersManaged LAN Devices Session ListSystem Specifying Operational ModeManaging Firmware Changing PasswordBacking up and Restoring Configuration Settings by Http To upgrade firmware of the SMCWHSG44-G by HttpUpgrading Firmware by Http Upgrading Firmware by Tftp To upgrade firmware of the SMCWHSG44-G by TftpTo back up configuration of the SMCWHSG44-G by Tftp Backing up and Restoring Configuration Settings by TftpTo restore configuration of the SMCWHSG44-G by Tftp Resetting Configuration to Factory Defaults Configuring TCP/IP Related Settings AddressTime Zone Router with a DHCP-Based DSL/Cable Connection Router with a Static-IP DSL/Cable Connection DNS DNS Proxy NAT Basic Host Address ResolutionTo expose preset internal servers Virtual Server MappingsDhcp Server Ii. Static Dhcp Mappings Dhcp Server BasicDhcp Relay Load BalancingTo always assign an IP address to a specific Dhcp client Configuring Ieee 802.11-Related Settings Wireless Basic Zero Client ReconfigurationWireless Distribution System To enable a WDS link Wireless Distribution System SettingsNetwork Topology Containing a Loop SecurityPage MAC-Address-Based Access Control Settings MAC-Address-Based Access ControlTo deny wireless clients access to the wireless network To grant wireless clients access to the wireless networkIeee 802.1x/RADIUS Ieee 802.1x/RADIUS Settings Configuring Authentication Settings AAA Basic Default Authentication Failure Warning To specify an uncontrolled computer by MAC address Unrestricted ClientsRadius Basic Walled GardenRobustness Log-On Page Customization Settings Authentication Session ControlAuthentication Success Page Customization Settings Ddns Advertisement Links SettingsIcmp TCP UDP Vlan FirewallTo set a rule for packet filtering URL Filters Management BasicTo block Http traffic to an unwelcome Web site System Log UPnPSnmp Access RulesLAN Device Management Unrestricted Host MAC Address SettingsTo specify a LAN device to manage Example for LAN Device ManagementAppendix a Default SettingsLED Definitions TCP/IP Setting Problems Page Other Problems Wireless Settings ProblemsAppendix C Distances and Data Rates Transmission output Power Network ConfigurationConfiguration and Management StandardsKeypad Authentication Access PointBasic Service Set BSS Ad HocExtended Service Set ESS Dynamic Host Configuration Protocol DhcpExtensible Authentication Protocol EAP EncryptionPower over Ethernet PoE Inter Access Point Protocol IappInfrastructure Local Area Network LANWireless Distribution System WDS Service Set Identifier SsidWi-Fi Protected Access Session KeyWPA Pre-shared Key PSK Wired Equivalent Privacy WEPPage For Technical SUPPORT, Call