User Guide

OmniAccess SafeGuard OS Administration Guide
221
Chapter 6: Configuring Authentication and Role Derivation
Captive Portal can be turned on or off for each port. By default, Captive Portal is disabled
on all ports. If Captive Portal is enabled on a port and a user uses a different
authentication mechanism (for example, Kerberos), the user is not presented with the
Captive Portal screens.
Planning for Captive Portal
The basic configuration checklist for Captive Portal follows:
1 Configure backend authentication, which means configuring:
— One or more RADIUS servers for backend authentication. See Configuring
RADIUS Servers on page 252.
— The local user database. See Configuring Rule Maps on page 279.
2 Configure the SafeGuard device to operate in monitor or protect mode (Captive
Portal does not operate in pass-through mode).
3 Configuring the Hijack Port
4 Configuring the Redirect Port
5 Configuring the Redirect Location
6 Setting the Refresh Interval Timer
7 Enabling and Disabling Captive Portal
8 Optional Captive Portal Configuration
9 Downloading New Certificates
Other tasks that are useful when working with Captive Portal CLI include:
■ Enabling and Disabling HTTPS
■ Specifying a Proxy Server
■ Restoring Certificates
■ Customizing Captive Portal and EPV Pages
■ Clearing the Login Page
■ Displaying the Current Configuration
■ Displaying Captive Portal Statistics
NOTE: Captive Portal can be enabled only on downstream interfaces. The
Captive Portal command has no effect on upstream interfaces or on SPAN
interfaces.