topic Re: Third party RADIUS + OTP + Captive Portal in General Topics

Third party RADIUS + OTP + Captive Portal

LCMember1361 — Fri, 10 Feb 2012 11:14:30 GMT

Hi all,

We are implementing a Nordic-Edge Server that provides radius and otp services. Once you have enter the user/password credentials in VPN-SSL portal , you get another screen which prompts you for the OTP that is sent by SMS.

The auth is OK , but the security policies are based in Active Directory users and groups. In order to solve it we are implementing a Captive Portal which is never shown.

Any Suggestions?

Thanks.

Re: Third party RADIUS + OTP + Captive Portal

mwalter — Fri, 10 Feb 2012 18:13:22 GMT

As soon as you authenticate through SSL-VPN, we know the user and Captive Portal rules don't kick in anymore. Captive Portal rules are only applied for unknown-users. Based on what kind of firewall you have, you could setup two vsys and route traffic between them. The first vsys would terminate the SSL-VPN and then route traffic to the second one, which runs Captive Portal. User-ID information is not shared among vsys, which means that even though the first vsys identifies the user correctly, the user would be unknown for vsys two and Captive Portal rules would be applied.

Re: Third party RADIUS + OTP + Captive Portal

LCMember1361 — Tue, 14 Feb 2012 12:41:33 GMT

OK,

thank you very much mwalter.