User's Manual Part 2


58JadeOSUserManual
allow‐fail‐through Allowtrafficthatfailedauthentication
auth‐server
Distributeauthenticationserver
set
Set Role/Vlan rule
9.4.4ConfiguringAuthenticationWay
AuthenticationssupportedbyJadeOSarecaptive‐portal,dot1x,mac,open,psk,wep,
andradius‐proxy;usuallytheauthenticationwaywillspecifydefault‐role,whichis
theuserroleaftersuccessfullyauthentication.Thischapterwilldescribethecon‐
figurationforauthenticationwaybyusingwebportalasanexample.
Inportalauthentication,youneedtodefinearfc‐3576‐client,thenaprofilethatat
leastincluderadiusservergroup、default‐role、rfc‐3576‐client.Pleasereferto
chapter9.7formoreinformation.
Forexample：
(JadeOS) (config)#aaa rfc-3576-client 119.6.200.203
(JadeOS) (RFC 3576 Client "119.6.200.203")#key 1234
(JadeOS) (RFC 3576 Client "119.6.200.203")#exit
(JadeOS) (config)#aaa authentication captive-portal web-portal
(JadeOS) (Portal Authentication Profile "web-portal)#server-group SG1
(JadeOS) (Portal Authentication Profile "web-portal)#default-role
postauth
(JadeOS) (Portal Authentication Profile "web-portal")#rfc-3576-client
119.6.200.203
CommandssupportedbyPortal:
Attribute Description
default‐role Distributedefaultrole
rfc‐3576‐client
RFC‐3576client
server‐group
webradiusservergroupname
welcome‐page‐url‐id
TheurlIDofwelcomepage
9.4.5ConfiguringAAAProfi le
ToconfigureAAAprofile,usethefollowingsteps：
Step1Createaaaaprofilenamed‘aaa’
(JadeOS) (config)#aaa profile aaa
Step2Specifytheauthenticationway
(JadeOS) (AAA profile "aaa")#authentication-portal web-portal
Step3Specifyuserolebeforeauthentication
(JadeOS) (AAA profile "aaa")#initial-role preauth