Deployment Guide
Table Of Contents
- Table of Contents
 - Preface
 - About Extreme Campus Controller Deployment
 - Configuring DHCP, NPS, and DNS Services
 - Centralized Site with a Captive Portal
 - Centralized Site with AAA Network
 - Deploying a Mesh Network
 - Configuring an External NAC Server for MBA and AAA Authentication
 - Manage RADIUS Servers for User Authentication
 - External Captive Portal on a Third-Party Server
 - Access Control Rule Admin Portal Access
 - Deploying Centralized Web Authentication
 - Deploying ExtremeCloud IQ - SE as an External Captive Portal
- Deployment Strategy
 - Configuring an External Captive Portal Network
 - Editing the Configuration Profile for Network and Roles
 - Extreme Campus Controller Default Pass-Through Rule
 - Adding Extreme Campus Controller as a Switch to ExtremeCloud IQ - Site Engine
 - Editing the Unregistered Policy on ExtremeCloud IQ - Site Engine
 - Editing the ExtremeCloud IQ - Site Engine Profile for Policy and Location-Based Services
 
 - Deploying an ExtremeGuest Captive Portal
 - Deploying Client Bridge
 - Deploying an Availability Pair
 - Deploying Universal APs
 - Extreme Campus Controller Pair with ExtremeLocation and AirDefense
 - ECP Local Authentication
 - PHP External Captive Portal, Controller’s Firewall Friendly API
 - Index
 
 // default authenticated role of the VNS that the
 // user is logging into.
 // For purposes of this example, assume all
 // authenticated users get the 'Guest_Access' role.
 return "Guest_Access";
 }
 }
 /**
 * A function that decides whether 
 * to use HTTP or HTTPS in the redirect to
 * the controller. This example just uses
 * a php.ini user configuration variable
 * to decide.
 */
 function isHttps() {
 if (get_cfg_var('use_https')) {
 if (1 == get_cfg_var('use_https')) {
 $useHttps = true;
 } else {
 $useHttps = false;
 }
 } else {
 $useHttps = false; 
 }
 return $useHttps;
 }
 /**
 * A method that assembles an unsigned URL out of the
 * the input from the user's succesful login
 * @param string $hwc_ip IP or FQDN of controller
 * @param int $hwc_port Port on controller to receive redirection
 * @param bool $useHttps Whether the redirect uses HTTP or HTTPS
 * @param string $token Identifier for the station's session
 * @param string $username The name the station's user logged in with
 * @param int $wlanid Identifier for the WLAN the station is using
 * @param string $assigned_role Name of the access control role to assign
 * @param string $dest The URL the station was trying to get to
 * @param int $max_duration The maximum length of the station's session.
 */
 function makeUnsignedUrl($hwc_ip, $hwc_port, $useHttps, $token,
 $username, $wlanid, $assigned_role, $dest,
 $max_duration) {
 $redirectUrl = ($useHttps ? EWC_HTTPS_REQ : EWC_HTTP_REQ)
 .$hwc_ip;
 if ((80 != $hwc_port) && (443 != $hwc_port)) {
 $redirectUrl .= ":".$hwc_port;
 }
 $redirectUrl .= EWC_REDIRECT_TARGET
 .'token='. rawurlencode($token)
 .'&wlan='.rawurlencode($wlanid)
 .'&username='.rawurlencode($username)
 .(is_not_empty($dest) ?'&dest='.rawurlencode($dest):'')
 .(is_not_empty($assigned_role) ? '&role='.
 rawurlencode($assigned_role):'')
 .(is_not_empty($max_duration) ?'&opt27='.$max_duration:'');
 return $redirectUrl;
 }
 ?>
common_utilities.php
<?php
 // A library of utilities that can be used by PHP scripts 
PHP External Captive Portal, Controller’s Firewall
Friendly API common_utilities.php
Extreme Campus Controller Deployment Guide for version 5.46.03 203










