Administrator Guide

Authentication, Authorization, and Accounting 359
the network. If traps are enabled, the switch also writes a message to the trap
log when the event occurs. To enable the CP traps, see "Configuring SNMP
Notifications (Traps and Informs)" on page 501.
What Factors Should Be Considered When Designing and Configuring a Captive
Portal?
Before enabling the CP feature, decide what type (or types) of authentication
will be supported. Since Dell EMC Networking N-Series switches support up
to 10 different CP instances, it is possible to configure one CP that requires a
username and password and another that only requires the username. For
each CP, the administrator can customize the welcome screen, including the
colors and logo.
If network policy requires authentication, consider the number of users that
must exist in the user database. The local user database supports up to 128
users. If there is a need to support more than 128 authenticated users, use a
remote RADIUS server for authentication.
The administrator can specify whether the CP uses HTTP or HTTPS as the
protocol during the user verification process. HTTP does not use encryption
during verification, and HTTPS uses the Secure Sockets Layer (SSL), which
requires a certificate to provide encryption. The certificate is presented to the
user at connection time.
If the authenticating user requires DNS or DHCP services, these will need to
be configured in the network and the switch will need to relay DHCP packets.
The initial Web page that a user sees when he or she connects to the CP can
be customized. The logo, color schemes, welcome messages, and all text on
the page can be customized, including the field and button labels. The
welcome page the user sees after a successful verification or authentication
can also be customized.