Filter Policy Configuration Overview
Page 280 7750 SR OS Router Configuration Guide
Web Redirection (Captive Portal)
The 7xx0 Series introduces a new type of redirection policy. Redirection policies were designed
for testing purposes. The new redirection policy can now block a customer’s request from an
intended recipient and force the customer to connect to the service’s portal server. 255 unique
entries with http-redirect are allowed.

Traffic Flow

The following example provides a brief scenario of a customer connection with web redirection.
1. The customer gets an IP address using DHCP (if the customer is trying to set a static IP he
will be blocked by the anti-spoofing filter).
2. The customer tries to connect to a website.
3. The router intercepts the HTTP GET request and blocks it from the network
4. The router then sends the customer a HTTP 302 (service temporarily unavailable/moved).
The target URL should then include the customer’s IP and MAC addresses as part of the por-
tal’s URL.
5. The customer’s web browser will then close the original connection and open a new connec-
tion to the web portal.
6. The web portal updates the ACL (directly or through SSC) to remove the redirection policy.
7. The customer connects to the original site.