How to: MGS/AWG - Setup Captive Portal

How to: MGS/AWG - Setup Captive Portal

Contents

 

1.  Captive portal & GuestNET. 2

1.1     Typical Applications. 2

1.2     Template Management 2

1.3     Zone Management 3

1.4     Authentication. 3

1.5     Voucher Manager 3

1.6     Timeouts & Welcome Back. 3

1.7     Bandwidth Management 4

1.8     Portal bypass. 4

1.9     Real Time Reporting. 4

1.10  Category based Web Filtering. 4

1.11  Platform Integration. 4

1.12  Configure the Portal 4


 

1.    Captive portal & GuestNET (activeGUEST)

Captive Portal allows you to force authentication, or redirection to a click through page for network access. This is commonly used on hotspot networks, but is also widely used in corporate networks for an additional layer of security on wireless or Internet access.

1.1             Typical Applications

·                      Guest Networks

·                      Stadiums

·                      Multi-use buildings

·                      Hotel & Camping Wi-Fi Access

·                      Bring Your Own Device (BYOD)

·                      many others

 

1.2             Template Management

activeARC®’s unique template manager makes setting up your own login page an easy task. At the same time, it offers additional functionalities, such as:

·                      URL redirection

·                      Option for your own Pop-up

·                      Custom Splash page

 

 

 

 

 

1.3          Zone Management

Different zones can be setup on each interface or multiple interfaces can share one zone setup. Each Zone can use a different Captive Portal Template or share it with another zone.

 

1.4             Authentication

Secure authentication via HTTPS or splash-only portal with URL redirection to a given page Different sources can be used to authenticate a user in a zone:

·     LDAP [Microsoft Active Directory]

·     Radius

·     Local user manager

·     Vouchers / Tickets

·     No authentication (Splash Screen Only)

·     Multiple (a combination of above)

 

1.5             Voucher Manager

activeARC®’s Captive Portal has an easy voucher creation system that exports the vouchers to a csv file for use with your favorite application. The export allows you to print vouchers by merging them with your Microsoft Word or LibreOffice template and create a good-looking handout with your logo and company style.

 

1.6             Timeouts & Welcome Back

Connection can be terminated after the user has been idle for a certain amount of time (idle timeout) and/or force a disconnect when a number of minutes have passed even if the user is still active (hard timeout). In case a user reconnects within the idle timeout and/or hard timeout no login is required and the user can resume its active session.

 

1.7             Bandwidth Management

The Built-in traffic shaper can be utilized to:

·         Share bandwidth evenly

·         Give priority to protocols port numbers and/or IP addresses

See also: Traffic Shaping

1.8             Portal bypass

MAC and IP addresses can be white listed to bypass the portal.

1.9             Real Time Reporting

Basic Real Time Reporting is Integrated

·         Live top IP bandwidth usage (Traffic Graph)

·         Active Sessions

·         Time left on Vouchers

1.10        Category based Web Filtering

By combining the Captive Portal with the caching proxy, it is possible to utilize category web filtering and block certain content for the users and by enabling the cache reduce bandwidth and improve response times. See also: Caching Proxy

1.11        Platform Integration

Through the integrated REST API the captive portal application can be integrated with other services. See: Use the API

1.12        Configure the Portal

To setup a hotspot controller for business or hotel usage sees: Setup a Guest Network


    • Related Articles

    • How to - Setup a routed IPSec Tunnel for MGS/AWG Gateway/Firewall

      1.0 Setup a routed IPSec Tunnel Most Site-to-Site VPNs are policy-based, which means you define a local and a remote network (or group of networks). Only traffic matching the defined policy is pushed into the VPN tunnel. As the demands for more ...
    • Quick Start Guide - MGS/AWG Gateway/Firewall

      Intended audience This guide is designed to be used by network managers, IT administrators, and technicians who are responsible for installing, networking equipment in enterprise and service provider environments. Knowledge of telecommunication and ...
    • How to: MGS/AWG Gateway - Setting up ZeroTier (snmp on a switch)

      1. Network diagram (as an example setup) 2. Configuring SNMP on ICCN WX7028-410G Switch Log in as admin to the switch web interface, make sure it is in the same subnet of the local network behind the ICCN AWG Gateway. For instance, if LAN IP of ...
    • How to: Setting up Monit natively on the MGS/AWG Gateway

      MGS/AWG - Monit Package Monit plugin is a Unix system management and proactive monitoring tool. This document will help guide set up the Monit tool on the ICCN AWG gateway. This Monit package is included in the AWG system by default. Monit is a ...
    • How to: MGS/AWG - Setting up a Routed IPSec Tunnel

      Contents 1.0 Setup a routed IPSec Tunnel 3 1.1 Before you start 3 1.2 Sample Setup. 3 1.3 Firewall Rules Site A & Site B (part 1) 6 2.0 Step 1 - Phase 1 Site A. 6 2.1 General information. 6 2.2 Phase 1 proposal (Authentication) 6 2.3 Phase 1 proposal ...