Академический Документы
Профессиональный Документы
Культура Документы
the table when he sits on the chair. The QR code notes Welcome to
ZyXEL. After the guest connects to the SSID and scans the QR code, he
will get the authentication message. Then, he can enjoy Wi-Fi service.
Step 2: Go to Zone > Edit. Set VLAN0 and VLAN10 be a LAN, therefore,
the member of VLAN10 can access to the member of VLAN1. The
employee in the VLAN10 can authenticate guest in the VLAN0.
Step 3: Create user information for guest and employees to login to the
Captive portal. Go to User/Group > User > Add.
*The User Type of guest must be guest or user.
Set a group for employee accounts. Go to User/Group > User > Group > add.
Step 5: Add an IP address range on the VLAN0 for guests that need to
login to the captive portal and add the interface subnet of employee on
the VLAN10. Go to Address > Address > Add.
The IP address range for guest using need to login the captive portal:
Step 8: Select the IP address range for guests that will be forced to be
authenticated by the captive portal.
9
Step 9: Bring up the page of the Captive Portal and enable the captive
portal feature, and authentication with the QR code. Select
Authenticator - assisted and then apply the configuration.
Guest AccountSelect guest user ID.
QR Portal Address Select the VLAN group of authenticator.
* Authenticator must be able to access the members of VLAN of QR Portal Address
for guests; otherwise, the authenticator will be unable to authenticate guests.
Employees are the authenticators, who can authenticate the guest to access the
INTERNET. Hence, QR Portal Address needs to be selected the VLAN10 that is the
VLAN of employee, and Authenticator needs to be selected a group of employees
who have privilege to authenticate.
10
11
Step 10: After AP deployment is ready, add the AP profiles for guest and
employee Wi-Fi service. Before setting the SSID, we need to set an
enterprise security for employee to use. Go to AP Profile > SSID >
Security List > Add.
If the information of authenticator is on the NXC, then select default
for Auth. Method that is local authentication for employees.
12
Step 11: Go to AP Profile > SSID > Add. Create two SSID for guests and
employees.
* Set the forwarding mode with Local bridge when the traffic of AP would go
through the NXC directly.
* Set the forwarding mode with Tunnel mode when the traffic of AP might not go
through the NXC directly. The tunnel mode setting could force all the traffic to go into
the NXC and lead to the Captive portal.
The SSID for guests using is named QR_guest with VLAN ID 1
13
The SSID for employees using is named QR_employee with VLAN ID 10 and
enterprise security.
Step 12: Create a radio configuration for the AP. Go to AP Profile > Radio
> Add.
14
Step 14: Guest can use a mobile device to connect to the SSID and open
the webpage. It would show the page of the captive portal with QR code.
15
Step 16: Go to Login Users. You can see that the guest has obtained the
IP address, as well as who authenticated the guest.
16
17
Step 10: Publish the QR code and then the guest could use a mobile
device to scan the QR code to pass the authentication.
Step 12: Scan QR code and the mobile device will show the result of the
authentication.
18
Step 13: Go to Login Users. You can see who obtained the IP address by
QR code authentication.
19
20
21