Tut Systems manual Customizing SMS2000 Web Authentication with Radius, Files For Groups

Page 86

Customizing SMS2000 Web Authentication with RADIUS

Chapter 15 - Customizing SMS2000 Web Authentication with RADIUS

This chapter describes how to work with and customize web pages on the SMS2000 when using RADIUS authentication. You can obtain the original web pages, for use in customizing, by contacting your Tut Systems representative, or you may extract them using a web browser.

By default, a set of web pages are created on the SMS2000 and presented to the user during authentication. These default pages can be left as is, or they can be customized for a particular property or group. The customized pages can be loaded to the SMS2000 and are presented in place of the default pages. This chapter describes:

•How to load customized pages to the SMS2000

•How to delete customized pages on the SMS2000

•How to customize pages for the SMS2000

Note: When using the OCS, the entire user experience is customized through the OCS, so you should not need to customize SMS2000 web pages. Instead, all subscriber-visible web pages can be customized through the OCS administrator interface–itself a web based application. SMS2000 web pages are customized only when using the SMS2000 with a RADIUS server.

Loading and Deleting Customized Web Pages

Initially, a default directory is created which stores the default set of web pages used by the SMS2000 for authentication, as well as images and other files that make up the default web pages. The default group (*) and any other group added to the SMS2000 will use the same default set of pages for authentication. Customized pages can be loaded and used in place of the default files. New files, such as image files, new web pages, and subdirectories can also be loaded for a group.

Files For Groups

By default, the files you load are active for the default group, also called “*” (pronounced “star”). If you are using a VLAN switch and would like to present different customized web pages to different groups, you must associate ports with groups, and change the default group using the set group command before loading the web pages. For more information on groups, please see Chapter 10, “Service Creation using Groups and Rules.”

Loading Web Pages or Files

After customizing the authentication files, they must be loaded to the SMS2000 using the load web command. This loads a specific web page (html file) or image (.gif, .jpg, or

.png) file from an external web or ftp server which you specify.

TUT Systems, Inc

Page 86 of 104

P/N 220-06288-20

Page 85 Page 87
Image 86
Page 85 Page 87
Contents TUT Systems SMS2000 User Guide SMS2000 User’s Guide SMSUser’s Guide Contents Configuring Snmp Polling Configuring SmtpConfiguring NTP Connectivity and TestingAuthentication with Radius Authentication Configuring the Command ServerAuthentication AuthorizationGroups Using Rule PrioritiesConfiguring Radius SMS2000 RulesSMS2000 Troubleshooting Procedures Using Both Radius and OCS AuthenticationWeb Proxy Settings SMS2000 Status Attributes and StatisticsList of Figures Radius Attributes in Access-Accept PacketsList of Tables Documentation available for this Release PrefaceAudience Related DocumentationSubscriber Management Features IntroductionIntroduction Subscriber Management Components Subscriber Management ComponentsSMS2000 OCSIntroduction Getting Started User InterfaceIfconfig portnumber ipaddress /masklen Accessing Help for CommandsFor example restore config web original-confi g Style ConventionsCursor Movement Cursor Motion KeystrokesEstablishing a Connection with the SMS2000 Initial ConfigurationClick Configure Establishing a Connection Via a Serial InterfaceEstablishing a Connection Via Telnet Initial Configuration Setting the Quick Configuration Initial ConfigurationChanging Your Password Saving the Configuration Setting the HostnameDisabling Authentication Reboot Rebooting the SystemVerifying the Configuration Setting the Default Configuration E-mail System AdministrationConfiguration E-Mail Settings Set config-mailrecipient@SMTPserver SMTPserverDeleting the Configuration E-mail Configuration and System File ToolsMailing the Current Configuration Committing Configuration ChangesCommit auto Automatically Committing Configuration ChangesDisabling Automatic Configuration Changes Commit noautoRestoring a Previous Configuration Saving a ConfigurationLoading a Configuration File Setting the Smtp Server Configuring SmtpRestoring the Default Configuration Deleting the Smtp ServerSetting the Timezone Configuring NTPSetting the Smtp ID Set smtpid on offSetting the Time Configuring Snmp PollingConfiguring the NTP server Enabling Snmp PollingSnmp-pollmacaddress Testing to See if Snmp Polling will WorkDisabling Snmp Polling Setting Specialized System Options Connectivity and TestingTesting Connectivity System ToolsLeftrighthelp ? Setting and Deleting Static PortsDefining Ports Port-definition mixed tut vlanEvent Tracking Disconnecting a Session on a PortSetting the Syslog Server Displaying Log MessagesExiting the Management Session System Administration ToolsDisplaying Version Information Passwd Changing a PasswordDisplaying Control Keys KeysSnmp System Contact Snmp ManagementSnmp Agent Snmp System LocationSnmp Community Snmp Trap RecipientSMS2000% snmp delete trap-recipient Troubleshooting ToolsSystem Information Tools Show snmp trap-recipientSetting the ARP Failure Limit Subscriber Connectivity CommandsUpgrades Setting the ARP Polling PeriodUpgrading from Tut Systems’ Website Archiving SMS2000 Firmware and distributing it from a ServerLoading Another Image Verifying a Successful UpgradeReturning to an Older Firmware Version System Administration Authentication AuthenticationDeleting the Command Server Configuring the Command ServerSetting the Command Server for OCS Interaction Adding the OCS as the Authentication ServerAuth add web url secret secret cmd-serv Deleting an Authentication ServerTesting Authentication Auth onAuth off forcedweb authokurl blockall Setting the Authentication IntervalBypassing Authentication Auth interval minutes offAllow-Nets Setting the Http Request ThrottleHttp Request Throttle Deleting the Http Request ThrottleSetting an Allow-Net Set allow-netipaddress netmask dns-nameDeleting an Allow-Net Setting the Automatic Redirection URLAutomatic Redirection URLs Set authok urlAdding a Radius Server Authentication with RadiusDeleting the authok Delete authokCommand Syntax DescriptionUsage Guidelines Example DefaultDefault retrans-primary-only is Set nas-port-type Set NAS port type parameterSet nas-port-type integer Show status radius Testing Authentication on the Radius ServerConfiguring a Radius SSL Back Channel Show status radius ExampleAuthorization AuthorizationAuthorization Server FunctionalitySending Accounting Messages to a Syslog Server AccountingAccounting Sending Accounting Messages to a Radius Server Radius Accounting ConfigurationConfiguring Accounting Parameters Deleting a Radius Accounting ServerProvisioning ProvisioningBilling BillingAdding a Group Service Creation Using Groups and RulesGroups Group add groupname noinherit inherit groupnameSetting Maximum Users Per Port Setting the Active Group ContextSubscribers that Cannot Support Authentication Deleting a GroupDeleting a Rule SMS2000 RulesAdding a Rule Set rule rulename groupname priority rulestringMAC Address Rule Expression ComponentsIP Address Ip=ipaddress ,netmaskTut=ipaddress-linenum*-portnum Not OperatorVlan=vlanida-vlanidb Parenthesis OperatorOr Operator Expression and expressionUsing Rule Priorities Plug and Play With NAT IP AddressingIP Addressing Static Routable Addresses Dhcp PoolsStatic Non-Routable Addresses IP MulticastingUnderstanding 1to1 and 1to1 Unique IP Types Configuring IP TypesIptype default NAT static Dhcp 1to1 1to1Unique Source-Nets Setting a Source-NetDeleting a Configured Source-Net Set source-netstartaddress endaddress subnet-maskRemoving a Dhcp Assignment Setting the DNS Server AddressCreating Dhcp Pools Dhcp-server release macaddressAdding Routes Static RoutesDeleting the DNS Server Address Set dns add ipaddressSet lpr hostname off queuename maxpages maxbytes Setting up the LPR HostPrinting Obtaining the Radius Server Software Using SMS2000 with a Radius ServerConfiguring Radius Adding Users to the Radius Server Configuring Service ParametersAdding the SMS2000 as a Client on the Radius Server Using Real IP Addresses Radius PortsRadius Attributes Sent in Accounting Messages SMS2000 Status Attributes and StatisticsSMS2000 NAS File Radius Attributes Received in Access- Accept Packets Using Both Radius and OCS AuthenticationRadius Attributes Sent In Access Request Packets Shape xbps/rbps Setting Traffic ShapingDeleting Traffic Shaping Shape xbps/rbps deleteSetting the PMS Server SMS2000 and Property Management Systems PMSProtocol Modes TTY ACK-NAK ENQ-ACK-NAKENQ-ACK-NAK Mode Files For Groups Customizing SMS2000 Web Authentication with RadiusLoading and Deleting Customized Web Pages Loading Web Pages or FilesImage Links Load web url defaultsPath Components Deleting Web Pages or Files Customizing Web PagesUpgrading Preserving the Web FormSize For Web Pages and External Links Web Page RedirectionReference Active Page ComponentsViewing Customizations Setting the Wpad Curl Configuring Web Proxy SettingsWeb Proxy Settings Setting the Wpad TimeoutWeb Proxy Server Show proxy-ports Set proxy-ports portDelete proxy-ports port SMS2000 Troubleshooting SMS2000 Troubleshooting ProceduresBrowser Snmp PollingMultiple frames opened Unable to do credit cardVerify OCS screens off LineAppendix a Radius Access-Accept Dictionary File Radius Attributes in Access-Accept PacketsAppendix Appendix TUT Systems, Inc 100 Internet Telephone Appendix B Technical Assistance and Customer SupportTechnical Support Equipment Return and RepairLimitations of Warranty Appendix C SMS2000 Limited WarrantyHardware Limited Warranty Exclusive RemediesAssistance Electrical Safety AdvisoryTut Systems, Inc., Customer Service Department FCC Radio Frequency Interference StatementTUT Systems, Inc 104
Top Page Image Contents