How to Configure Remote Portal Authentication (Remote Web Server & Remote Authentication Server) on TP-Link CAP/AC Serial Products

TP-LINK AC controller supports multiple kinds of portal authentication methods. This article will introduce how to configure Remote Portal Authentication (Remote Web Server & Remote Authentication Server) on TP-Link CAP/AC serial products.

Step 1: Configure Remote Radius Server

1.1 Please go to Authentication – Authentication Server – Radius Server page to designate the address of the Radius Server.

Note:

1. The Server Address can be IP address or Domain name, here we take 172.30.30.121 for example, please prepare the Radius server by yourself first.
2. The Share Key is used for the authentication between the AC Controller and the Radius Server, please make sure the keys of the both sides are the same.

1.2 Then please go to the Authentication Server page to create a server group and choose the Radius Server we created just now.

Step 2 Configure the Remote Portal

Please go to Authentication – Portal Authentication – Remote Portal page to designate the Remote Portal Address and the Authentication Server Type as Remote Authentication Server and then choose the server group we created just now as shown in the picture below.

Note:

1. The Remote Portal Address can be the IP address or the Domain Name. Here we take 172.30.30.121 for example. You need to set up your own Portal Server first.
2. You can also bind this authentication method with some specific VLANs, here we just leave the VLAN ID option blank, which means this authentication method takes effect into all the SSIDs that does not bind with any VLANs.

Step 3 Create Accounts

Here we used “WinRadius” as the remote radius server and create one account (username/password are both “admin”) as shown below.

Step 4 Connect to the SSID and pass the authentication

After finishing all these configurations, please connect your phone or laptop to the SSID that is binded with this authentication method, and then a portal page will pop up automatically when you open any HTTP websites and requires the Username and Password for authentication as shown below. Please use the account we created just now for the authentication and then enjoy the Internet.

Note:

1. In this example, we just use a simple Portal page for test and instruction, you can customize delicate Portal page as you like.
2. The construction of the Portal page and Portal server is beyond the scope of the article. In the appendix, we will introduce a simple way to build the Portal Server by using Microsoft Internet Information Service (IIS).

Appendix

How to set up a Portal Server by using Microsoft Internet Information Service (IIS) on a Windows 7 computer.

1. Prepare a web page file which contains the customized Portal page in advance.
2. On Windows 7 computer, please go to Start – Control Panel – Program – Turn Windows features on or off, then in the pop-up window, find and turn on Internet Information Service (IIS) as shown in the picture below.

3. Then please find IIS manager in the start menu and import the prepared Portal page, after that you can type http://127.0.0.1 in browser’s address bar to check if the Portal Server works.

Note: the default authentication port of the portal is 8080, please make sure it is the same as you defined in your Portal page. You can also change it on the Authentication – Portal Authentication – Authentication Config page.