Dell PowerEdge M820 Dell PowerConnect M6220/M6348/M8024 Switches Configuration - Page 121

Captive Portal Status, Captive Portal Configuration Management

Page 121 highlights

Captive Portal Configuration Management In order to provide text-based compatibility, Captive Portal converts the binary image data to text (and vice versa) through special CLI commands that are only issued for script files. Although the data is shown in ASCII, it not for the end user (it is intended to be read by the text-based configuration). The following data types (and conversions) are implemented by the associated CLI commands for Captive Portal: • Standard ASCII- Latin alphabet (0-127 decimal) for regular configuration data. No conversion is necessary. • Locale customization Unicode characters-Provide locale specific web customization. This data is stored according to the Unicode hexadecimal code points using UTF-16 where each Unicode character is specified using four bytes. UTF-16 is selected for its CJK ideograph capabilities used for Japan, China, and Korea. • Binary images- Used for web customization. These are GIF or JPG binary files. These files are encoded from binary to text (and vice versa) using a basic base64 encoding scheme. The "show running-config" command generates the special locale and binary image configuration commands for script files only. For these commands, no output is shown via "show running-config" when the display is set to standard output. The actual contents however can still be displayed using the specific Captive Portal CLI show commands. The local user database passwords appear in encrypted format when the user issues "show runningconfig". Dedicated CLI commands accept password configuration in encrypted format, which allows the startup script to execute at boot time. For all other configurations that do not require any special conversion, CLI commands are shown in the normal manner using "show running-config". Captive Portal Status Captive Portal status is available primarily through 3 tables: • Client Connections • Authentication Failures • Activity Log Client Connections Client entries are added to and deleted from this table as each user becomes authenticated or deauthenticated using Captive Portal. A trap is sent for every addition. Each table entry identifies the authenticated user, the connection interface, and the captive portal instance for which the client is authenticated and the current session time. The administrator may issue a command to de-authenticate a connected client. As a result, the client session is terminated and the associated entry is removed from the database. This does not prevent the user from obtaining a subsequent captive portal connection. The administrator must remove the user entry from the local user database (or RADIUS) configuration to prevent future connections. Device Security 121

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158

Device Security
121
Captive Portal Configuration Management
In order to provide text-based compatibility, Captive Portal converts the binary image data to text (and
vice versa) through special CLI commands that are only issued for script files. Although the data is
shown in ASCII, it not for the end user (it is intended to be read by the text-based configuration). The
following data types (and conversions) are implemented by the associated CLI commands for Captive
Portal:
Standard ASCII —
Latin alphabet (0-127 decimal) for regular configuration data. No conversion is
necessary.
Locale customization Unicode characters —
Provide locale specific web customization. This data is
stored according to the Unicode hexadecimal code points using UTF-16 where each Unicode
character is specified using four bytes. UTF-16 is selected for its CJK ideograph capabilities used for
Japan, China, and Korea.
Binary images —
Used for web customization. These are GIF or JPG binary files. These files are
encoded from binary to text (and vice versa) using a basic base64 encoding scheme.
The "show running-config" command generates the special locale and binary image configuration
commands for script files only. For these commands, no output is shown via "show running-config" when
the display is set to standard output. The actual contents however can still be displayed using the specific
Captive Portal CLI show commands.
The local user database passwords appear in encrypted format when the user issues "show running-
config". Dedicated CLI commands accept password configuration in encrypted format, which allows the
startup script to execute at boot time.
For all other configurations that do not require any special conversion, CLI commands are shown in the
normal manner using "show running-config".
Captive Portal Status
Captive Portal status is available primarily through 3 tables:
Client Connections
Authentication Failures
Activity Log
Client Connections
Client entries are added to and deleted from this table as each user becomes authenticated or de-
authenticated using Captive Portal. A trap is sent for every addition. Each table entry identifies the
authenticated user, the connection interface, and the captive portal instance for which the client is
authenticated and the current session time.
The administrator may issue a command to de-authenticate a connected client. As a result, the client
session is terminated and the associated entry is removed from the database. This does not prevent the
user from obtaining a subsequent captive portal connection. The administrator must remove the user
entry from the local user database (or RADIUS) configuration to prevent future connections.