User's Manual

EnRoute500 User’s Guide

TR0149 Rev. C5

<html>

<head>

<title>Test Login Page</title>

</head>

<body>

Welcoming text or 'Terms of Service' could go here.<br />

</form>

</body>

</html>

Figure 51. Sample HTML code for web page when authentication is disabled

15.1.3 Configuring the Authentication Server

A RADIUS authentication server must be specified when the splash page is enabled for an

interface. The ‘splash.auth.server.<intf>.host’, ‘splash.auth.server.<intf>.port’, and

‘splash.auth.server.<intf>.secret’ parameters in the ‘sys’ interface, where <intf> is either

‘wlan1’, ‘wlan2’, ‘wlan3’, or ‘wlan4’, specify the authentication server to use. The

‘splash.auth.server.<intf>.host’ parameter can be either a hostname or and IP address.

‘splash.auth.server.<intf>.port’ is the port that the authentication server is listening on.

‘splash.auth.server.<intf>.secret’ is the shared secret that must be provided to the RADIUS

authentication server. This parameter must be a string of alphanumeric characters that is 32

characters or less in length.

The authentication server parameters can be set on the “Splash Pages” sub-tab under the

“AAA” tab on the “System Parameters” page of the web interface (see

Figure 49).

The example below shows how to configure the authentication server for interfaces ‘wlan1’ and

‘wlan2’.

> use sys

sys> set splash.auth.server.wlan1.host=auth1.yourserverhere.com

sys> set splash.auth.server.wlan1.port=1812

sys> set splash.auth.server.wlan1.secret=authsecret

sys> set splash.auth.server.wlan2.host=auth2.yourserverhere.com

sys> set splash.auth.server.wlan2.port=1812

sys> set splash.auth.server.wlan2.secret=authsecret

15.1.4 Trusted MAC Addresses

A list of trusted MAC addresses that do not require splash page authentication can be defined.

When a device with one of these MAC addresses connects to a node, it will automatically have

full access to the WAN. The list of trusted MAC addresses is set with the ‘splash.trusted_macs’