Dell PowerConnect W Clearpass 100 Software 3.7 Deployment Guide - Page 24

Figure 4 Sequence diagram for network access using AAA Guest NAS Amigopod AMG Associates [1] Redirects Complete login form Automated NAS login Internet browsing Unregistered role Browse to Landing page [2] Submit form [3] Login Message page [4] Access-Request [5] Access-Accept [6] Guest role [7] Accounting-Request [8] Accounting-Response Web login Authentication Authorization Accounting Session timeout [9] Accounting-Request [10] Accounting-Response Accounting States: Unauthorized Authenticating Authorized In the standard AAA framework, network access is provided to a user according to the following process:  The user connects to the network by associating with a local access point [1].  A landing page is displayed to the user [2] which allows them to log into the NAS [3], [4] using the login name and password of their guest account.  The NAS authenticates the user with the RADIUS protocol [5].  The Amigopod Visitor Management Appliance determines whether the user is authorized, and if so returns vendor-specific attributes [6] that are used to configure the NAS based on the user's role [7].  If the user's access is granted, the NAS permits the guest to access the network, based on the settings provided by the Amigopod Visitor Management Appliance.  The NAS reports details about the user's session to the Amigopod Visitor Management Appliance using RADIUS accounting messages [8]. After the user's session times out [9], the NAS will return the user to an unauthorized state and finalize the details of the user's session with an accounting update [10]. 24 | Management Overview Amigopod 3.7 | Deployment Guide