TP-Link Omada ER8411 VPN Router - Manual (Page 193)

User Guide 184
Configuring Authentication Overview
1
Overview
Portal authentication, also known as Web authentication, is usually deployed in a guest-
access network (like a hotel or a coffee shop) to control the client’s internet access. In
portal authentication, all the client’s HTTP requests will be redirected to an authentication
page first. The client needs to enter the account information on the page to authenticate,
then can visit the internet after the authentication succeeded.
1.1 Typical Topology
The typical topology of portal authentication is shown as below:
Figure 1-1 Topology of Portal Authentication
Client
Access Device
Web Server
Authentication Server
■ Client
The end device that needs to be authenticated before permitted to access the internet.
■ Access Device
The device that supports portal authentication. In this user guide, it means the router. The
Access Device helps to: redirect all HTTP requests to the Web Server before authenticated;
interact with the Authentication Server to authenticate the client during the authentication
process; permit users to access the internet after the authentication succeeded.
■ Web Server
The web server responds to client’s HTTP requests, and returns an authentication login
page.
■ Authentication Server
The authentication server records the information of the user’s account, and interacts with
the access device to authenticate clients.