User's Manual

Table Of Contents
129
Users Manual of CS-6306R
Figure 6-3 web authentication flow
6.3.1.2 Planning Web Authentication
1. Planning the authentication mode
Two authentication modes are provided to control user's access:
Username/password authentication mode: In this mode, the switch identifies the user through the username
and password, and notifies the AAA server to start charging according to username; user needs to enter the
username and password through the browser.
VLAN ID authentication mode: In this mode, the switch identifies the user through the VLAN ID the user
belongs to, and notifies the AAA server to start charging according to VLAN ID; user only requires to confirm
corresponding operations on the Web page before accessing the network.
Different operation strategies adopt different authentication modes. The supported maximum number of users
that simultaneously access the network varies with the authentication mode. For the username/password
authentication mode, the switch supports simultaneously accessed users as many as its performance permits.
For the VLAN ID authentication mode, the maximum number of simultaneously accessed users equals the
number of VLAN that the switch supports.
cl i ent
swi t ch
dhcp ser ver
DNS s e r v e r AAA s er v er
DHCP ACK
DNS REQUERY
DNS RESPONSE
ht t p r equest
ht t p r esponse( ask user t o l ogi n)
ht t p r equest ( l ogi n)
aut hent i cat i on r equest
aut hent i cat i on r esul t
st ar t account i ng r equest
st ar t account i ng r esul t
aut hent i cat i on r esul t
ht t p r equest ( keepal i ve)
ht t p r esponse( keepal i ve r esponse)
ht t p r equest ( l ogout ) st op account i ng r equest
ht t p r esponse( l ogout )