Tut Systems SMS2000 manual Setting the Authentication Interval, Bypassing Authentication

Page 48

Authentication

A warning will appear.

Note: You do not have to specifically enable authentication. Simply adding a

Web or RADIUS server is sufficient.

Disabling Authentication

Use the auth off command to disable authentication for the current group.

If you use the auth off command with the forcedweb option, when an unauthenticated subscriber first trys to access the Internet, the subscriber is automatically redirected to the specified Web page; for example, an ISP’s portal page. If the blockall option is also specified, subscribers cannot use network services, such as FTP and telnet, until this Web page has been viewed, otherwise only web services are blocked. To disable authentication for the current group use this command:

auth off [forcedweb authok_url [blockall]]

For example, to disable authentication for the current group, but send subscribers to the tutsys.com page, type:

sms2000% auth off forcedweb http://www.tutsys.com

Setting the Authentication Interval

Note: This is only used when authentication is turned off for the group and forced web is enabled.

To set the interval used for recurring authentication (in minutes), use this command:

auth interval {minutes off}

For example, to set the interval between recurring authentications to one hour (60 minutes), type:

sms2000% auth interval 60

Note: When authentication is off and a forced web page is enabled, the forced web page will be presented to the subscriber at the end of every auth interval.

Bypassing Authentication

To manually connect a client and bypass authentication, use this command:

connect session_id

For example, to manually connect the user associated with port 3, type:

sms2000% connect 3

Note: This command requires a session id and that authentication is enabled.

TUT Systems, Inc

Page 48 of 104

P/N 220-06288-20

Image 48

Contents TUT Systems SMS2000 User Guide SMS2000 User’s Guide SMSUser’s Guide Contents Configuring Smtp Configuring NTPConfiguring Snmp Polling Connectivity and TestingAuthentication Configuring the Command Server AuthenticationAuthentication with Radius AuthorizationUsing Rule Priorities Configuring RadiusGroups SMS2000 RulesUsing Both Radius and OCS Authentication Web Proxy SettingsSMS2000 Troubleshooting Procedures SMS2000 Status Attributes and StatisticsRadius Attributes in Access-Accept Packets List of TablesList of Figures Preface AudienceDocumentation available for this Release Related DocumentationSubscriber Management Features IntroductionIntroduction Subscriber Management Components Subscriber Management ComponentsSMS2000 OCSIntroduction Getting Started User InterfaceAccessing Help for Commands For example restore config web original-confi gIfconfig portnumber ipaddress /masklen Style ConventionsCursor Movement Cursor Motion KeystrokesInitial Configuration Click ConfigureEstablishing a Connection with the SMS2000 Establishing a Connection Via a Serial InterfaceEstablishing a Connection Via Telnet Initial Configuration Initial Configuration Changing Your PasswordSetting the Quick Configuration Setting the Hostname Disabling AuthenticationSaving the Configuration Rebooting the System Verifying the ConfigurationReboot System Administration Configuration E-Mail SettingsSetting the Default Configuration E-mail Set config-mailrecipient@SMTPserver SMTPserverConfiguration and System File Tools Mailing the Current ConfigurationDeleting the Configuration E-mail Committing Configuration ChangesAutomatically Committing Configuration Changes Disabling Automatic Configuration ChangesCommit auto Commit noautoSaving a Configuration Loading a Configuration FileRestoring a Previous Configuration Configuring Smtp Restoring the Default ConfigurationSetting the Smtp Server Deleting the Smtp ServerConfiguring NTP Setting the Smtp IDSetting the Timezone Set smtpid on offConfiguring Snmp Polling Configuring the NTP serverSetting the Time Enabling Snmp PollingTesting to See if Snmp Polling will Work Disabling Snmp PollingSnmp-pollmacaddress Connectivity and Testing Testing ConnectivitySetting Specialized System Options System ToolsSetting and Deleting Static Ports Defining PortsLeftrighthelp ? Port-definition mixed tut vlanDisconnecting a Session on a Port Setting the Syslog ServerEvent Tracking Displaying Log MessagesSystem Administration Tools Displaying Version InformationExiting the Management Session Changing a Password Displaying Control KeysPasswd KeysSnmp Management Snmp AgentSnmp System Contact Snmp System LocationSnmp Community Snmp Trap RecipientTroubleshooting Tools System Information ToolsSMS2000% snmp delete trap-recipient Show snmp trap-recipientSubscriber Connectivity Commands UpgradesSetting the ARP Failure Limit Setting the ARP Polling PeriodUpgrading from Tut Systems’ Website Archiving SMS2000 Firmware and distributing it from a ServerVerifying a Successful Upgrade Returning to an Older Firmware VersionLoading Another Image System Administration Authentication AuthenticationConfiguring the Command Server Setting the Command Server for OCS InteractionDeleting the Command Server Adding the OCS as the Authentication ServerDeleting an Authentication Server Testing AuthenticationAuth add web url secret secret cmd-serv Auth onSetting the Authentication Interval Bypassing AuthenticationAuth off forcedweb authokurl blockall Auth interval minutes offSetting the Http Request Throttle Http Request ThrottleAllow-Nets Deleting the Http Request ThrottleSetting an Allow-Net Set allow-netipaddress netmask dns-nameSetting the Automatic Redirection URL Automatic Redirection URLsDeleting an Allow-Net Set authok urlAuthentication with Radius Deleting the authokAdding a Radius Server Delete authokCommand Syntax DescriptionDefault Default retrans-primary-only isUsage Guidelines Example Set NAS port type parameter Set nas-port-type integerSet nas-port-type Testing Authentication on the Radius Server Configuring a Radius SSL Back ChannelShow status radius Show status radius ExampleAuthorization AuthorizationAuthorization Server FunctionalityAccounting AccountingSending Accounting Messages to a Syslog Server Radius Accounting Configuration Configuring Accounting ParametersSending Accounting Messages to a Radius Server Deleting a Radius Accounting ServerProvisioning ProvisioningBilling BillingService Creation Using Groups and Rules GroupsAdding a Group Group add groupname noinherit inherit groupnameSetting the Active Group Context Subscribers that Cannot Support AuthenticationSetting Maximum Users Per Port Deleting a GroupSMS2000 Rules Adding a RuleDeleting a Rule Set rule rulename groupname priority rulestringRule Expression Components IP AddressMAC Address Ip=ipaddress ,netmaskNot Operator Vlan=vlanida-vlanidbTut=ipaddress-linenum*-portnum Operator Or OperatorParenthesis Expression and expressionUsing Rule Priorities IP Addressing IP AddressingPlug and Play With NAT Static Routable Addresses Dhcp PoolsStatic Non-Routable Addresses IP MulticastingConfiguring IP Types Iptype default NAT static Dhcp 1to1 1to1UniqueUnderstanding 1to1 and 1to1 Unique IP Types Setting a Source-Net Deleting a Configured Source-NetSource-Nets Set source-netstartaddress endaddress subnet-maskSetting the DNS Server Address Creating Dhcp PoolsRemoving a Dhcp Assignment Dhcp-server release macaddressStatic Routes Deleting the DNS Server AddressAdding Routes Set dns add ipaddressSetting up the LPR Host PrintingSet lpr hostname off queuename maxpages maxbytes Using SMS2000 with a Radius Server Configuring RadiusObtaining the Radius Server Software Configuring Service Parameters Adding the SMS2000 as a Client on the Radius ServerAdding Users to the Radius Server Using Real IP Addresses Radius PortsSMS2000 Status Attributes and Statistics SMS2000 NAS FileRadius Attributes Sent in Accounting Messages Using Both Radius and OCS Authentication Radius Attributes Sent In Access Request PacketsRadius Attributes Received in Access- Accept Packets Setting Traffic Shaping Deleting Traffic ShapingShape xbps/rbps Shape xbps/rbps deleteSetting the PMS Server SMS2000 and Property Management Systems PMSProtocol Modes TTY ACK-NAK ENQ-ACK-NAKENQ-ACK-NAK Mode Customizing SMS2000 Web Authentication with Radius Loading and Deleting Customized Web PagesFiles For Groups Loading Web Pages or FilesLoad web url defaults Path ComponentsImage Links Customizing Web Pages UpgradingDeleting Web Pages or Files Preserving the Web FormSize For Web Pages and External Links Web Page RedirectionActive Page Components Viewing CustomizationsReference Configuring Web Proxy Settings Web Proxy SettingsSetting the Wpad Curl Setting the Wpad TimeoutWeb Proxy Server Set proxy-ports port Delete proxy-ports portShow proxy-ports SMS2000 Troubleshooting SMS2000 Troubleshooting ProceduresSnmp Polling Multiple frames openedBrowser Unable to do credit cardVerify OCS screens off LineAppendix a Radius Access-Accept Dictionary File Radius Attributes in Access-Accept PacketsAppendix Appendix TUT Systems, Inc 100 Appendix B Technical Assistance and Customer Support Technical SupportInternet Telephone Equipment Return and RepairAppendix C SMS2000 Limited Warranty Hardware Limited WarrantyLimitations of Warranty Exclusive RemediesElectrical Safety Advisory Tut Systems, Inc., Customer Service DepartmentAssistance FCC Radio Frequency Interference StatementTUT Systems, Inc 104