wlan接入过程（WLAN access process）.docVIP

wlan接入过程（WLAN access process） WLAN access process Process description: 1) the user gets the planned IP address through the AC through the standard DHCP protocol. 2) the user opens IE, accesses a site, and initiates a HTTP request. 3) the AC intercepts the users HTTP request and forces it to the Portal server because the user has not authenticated it. And in the mandatory Portal URL to add relevant parameters, please refer to the China Mobile WLAN business PORTAL protocol specification.. 4) the Portal server pushes the WEB authentication page to the WLAN user terminal. 5) the user fills in the authentication page to fill in the account number, password and so on information, submits to the Portal server. 6) the Portal server receives the user information and issues the user information inquiry request to the Radius. 7) Radius to verify the user password, query the user information, and return to Portal query results and system configuration of the single connection maximum (SessionTimeout), mobile phone users and package card users remaining long information (AvailableTime). 8) if the query succeeds, the Portal server requests Challenge from the AC in accordance with the CHAP process. If the query fails, Portal returns the hint information directly to the user, and the process ends here. 9) AC returns Challenge, including Challenge, ID, and Challenge. 10) Portal will password and Challenge, ID and Challenge do MD5 algorithm after the Challenge-Password, and accounts submitted to the AC, launched certification. 11) AC sends Challenge, ID, Challenge, Challenge-Password, and accounts to the central RADIUS user authentication server, which is authenticated by the central RADIUS user authentication server. 12) the central RADIUS server judges whether the user is legitimate according to the users information. (for the prepaid card users in the province), it is also necessary to determine whether the users access is the same as the place of ownership. RADIUS carries out sta