Captive portal systems, methods, and devices

1. A method comprising:

receiving, from a client, a client request for network access;

receiving authentication credentials of a user of the client, wherein the authentication credentials are received via a captive portal user interface;

identifying an active network session for the client based on an Internet protocol (IP) address of the client;

causing a change of authorization at a wireless controller to authenticate the client based on dynamic authorization extensions to a remote authentication dial in user service (RADIUS); and

redirecting the client to a uniform resource locator (URL) specified in the client request for network access.

2. The method of claim 1 , further comprising creating a finite state machine, wherein, to cause the change of authorization, the finite state machine negotiates the change of authorization with the wireless controller.

3. The method of claim 1 , wherein an access point may load balance the client request for network access with other client requests for network access based on a mapping between the wireless controller and a captive portal IP address associated with the captive portal user interface.

4. The method of claim 1 , further comprising mapping one or more captive portal IP addresses to the wireless controller prior to receiving the client request for network access.

5. The method of claim 1 , wherein control of multiple mobility virtual local area networks (VLANs) is mediated by an external captive portal device.

6. The method of claim 1 , wherein the wireless controller includes a mapping to a captive portal IP address.

7. The method of claim 1 , wherein a plurality of floating IP addresses are used for load balancing and distribution of captive portal IP addresses.

8. A non-transitory computer-readable storage medium carrying program instructions thereon, the instructions when executed by one or more hardware processors cause the one or more hardware processors to perform operations comprising:

receiving, from a client, a client request for network access;

receiving authentication credentials of a user of the client, wherein the authentication credentials are received via a captive portal user interface;

identifying an active network session for the client based on an Internet protocol (IP) address of the client;

causing a change of authorization at a wireless controller to authenticate the client based on dynamic authorization extensions to a remote authentication dial in user service (RADIUS); and

redirecting the client to a uniform resource locator (URL) specified in the client request for network access.

9. The computer-readable storage medium of claim 8 , wherein the instructions further cause the one or more hardware processors to perform operations comprising creating a finite state machine, wherein, to cause the change of authorization, the finite state machine negotiates the change of authorization with the wireless controller.

10. The computer-readable storage medium of claim 8 , wherein an access point may load balance the client request for network access with other client requests for network access based on a mapping between the wireless controller and a captive portal IP address associated with the captive portal user interface.

11. The computer-readable storage medium of claim 8 , wherein the instructions further cause the one or more hardware processors to perform operations comprising mapping one or more captive portal IP addresses to the wireless controller prior to receiving the client request for network access.

12. The computer-readable storage medium of claim 8 , wherein control of multiple mobility virtual local area networks (VLANs) is mediated by an external captive portal device.

13. The computer-readable storage medium of claim 8 , wherein the wireless controller includes a mapping to a captive portal IP address.

14. The computer-readable storage medium of claim 8 , wherein a plurality of floating IP addresses are used for load balancing and distribution of captive portal IP addresses.

15. A system comprising:

one or more hardware processors; and

logic circuit encoded in one or more non-transitory computer-readable media for execution by the one or more hardware processors and when executed operable to perform operations comprising:

receiving, from a client, a client request for network access;

receiving authentication credentials of a user of the client, wherein the authentication credentials are received via a captive portal user interface;

identifying an active network session for the client based on an Internet protocol (IP) address of the client;

causing a change of authorization at a wireless controller to authenticate the client based on dynamic authorization extensions to a remote authentication dial in user service (RADIUS); and

redirecting the client to a uniform resource locator (URL) specified in the client request for network access.

16. The system of claim 15 , wherein the logic circuit when executed is further operable to perform operations comprising creating a finite state machine, wherein, to cause the change of authorization, the finite state machine negotiates the change of authorization with the wireless controller.

17. The system of claim 15 , wherein an access point may load balance the client request for network access with other client requests for network access based on a mapping between the wireless controller and a captive portal IP address associated with the captive portal user interface.

18. The system of claim 15 , wherein the logic circuit when executed is further operable to perform operations comprising mapping one or more captive portal IP addresses to the wireless controller prior to receiving the client request for network access.

19. The system of claim 15 , wherein control of multiple mobility virtual local area networks (VLANs) is mediated by an external captive portal device.

20. The system of claim 15 , wherein the wireless controller includes a mapping to a captive portal IP address.