Tunnel Support for URL Redirection

URL Redirection is an authentication feature that allows users to be redirected to a specified URL after successful authentication and when accessing blocked sites.

Feature Overview

The URL Redirect feature enables you to set up a standard usage WLAN to send users to a specific web page only after 802.1X or MAC authentication has been successfully completed. You can configure this web redirect to allow access to the network completely or partially. The redirect page and the conditions under which the redirection occurs are configured in the RADIUS server.

Note:

The SmartZone 7.1.1 release adds support for URL Redirection in tunneled WLANs. When configuring your WLAN, the following Data Plane tunnel configurations are supported:

  • GRE tunnel profile + Bridge core network
  • GRE tunnel profile + L2oGRE core network
  • GRE tunnel profile + IPSec
  • GRE tunnel profile + DP DHCP/NAT
  • SGRE tunnel profile
RGRE + Bridge, RGRE + L2GRE, RGRE + IPSec, RGRE + DP, DHCP NAT, and SGRE.

Requirements

  • The URL Redirect and ACL defined by RADIUS feature requires the controller to be running SmartZone release 7.0.0 or later.
  • The Tunnel Support for URL Redirection feature enhancement requires the controller to be running SmartZone release 7.1.1 or later.

Considerations

This feature has no special considerations pertaining to feature enablement or usage.

Limitations

Note the following limitations regarding URL redirection:

  • The feature is supported on WLANs having the following Authentication configuration:
    • Authentication Type = Standard usage
    • Authentication Method = 802.1X or MAC Address
    • Authentication Service = ON to use the controller as proxy
  • Data Plane option Split Tunnel Profile must be disabled.
  • Wired clients are not supported.
  • The maximum length of the allowed external URL defined in the AAA is 512 characters.

Best Practices

This feature has no special recommendations for feature enablement or usage.

Prerequisites

This feature has no prerequisites to feature enablement or usage.

In this section:

  1. Configuring URL Redirection
    URL Redirection uses ACLs set up in the controller to apply dynamic URL Redirection policies based on RADIUS attributes received during user authentication.
Parent topic: Creating Proxy Authentication AAA Servers