MSM7xx Controllers Configuration Guide v6.4.0

login (as described in this section), or by using the NOC-based authentication feature (described
in “NOC authentication” (page 549).
The following diagram shows the sequence of events for a typical user session when using a
remote login page and a RADIUS server for authentication.
Non-authenticated user
attempts to browse a
web site on the
protected network.
Web browser is redirected.
Request is intercepted.
Login page is sent.
Login info is sent to
the RADIUS server.
Login approved.
User configuration
settings are returned.
Web server sends
the Welcome page
with URL of originally
requested web site.
User login info
is sent.
User’s web browser
is redirected to the
Welcome page.
HTML redirect is sent to
the user’s browser
pointing it to the
Welcome page
(This page could be
hosted on a different
web server.)
RADIUS serverUser
Web server hosting
remote login page
Controller
Syntax
login-url=URL_of_the_page [placeholder]
Access to the Web server hosting this page must be granted to all unauthenticated users. Do
this with an appropriate access list definition. (Users see this page before they are logged in.)
Placeholders
An important feature of these pages is that they make it easy to deliver a unique experience
for each user. By appending the following optional placeholders to the Colubris AV-Pair
value strings, you can pass important information to the Web server. Server-side code can
process this information to generate custom pages on-the-fly.
DescriptionPlaceholder
Returns the WISPr location-ID. Supported for login-url only.%d
Returns the WISPr location-Name. Supported for login-url only.%e
Returns the URL on the controller where user login information should be
posted for authentication. This option is used with the remote login page
%l
feature. By default, this value is URL encoded. (To enable/disable URL
encoding, set the value of url-encode in the <ACCESS-CONTROLLER>
section in the configuration file.)
Returns the NAS ID assigned to the controller. By default, this is the unit
serial number. Not supported in local mode.
%n
470 Working with RADIUS attributes