General question regarding of remote FAS in auth call back

[a13519]

Given a case the remote FAS is setup, if am right, the router needs to manually (or OpenNDS will do that?) open a port in firewall to allow FAS to callback after authentication, this need to take care the dynamic ip assigned by ISP. Am I right? If yes, is there any other way to bypass the firewall port opening?

And Authmon is scheduled every 15 seconds to poll the result from FAS in case FAS deauth the client, so it's not for initial authentication but maintain a legit connection. Correct me if I am wrong, 15 seconds are unbearable for user to wait after type in the credentail.

Component	Location side	Doing
http_microhttpd.c	Router	HTTP handler to receive the authentication call back from remote FAS
Authmon	Router	Regularly to poll the client status from remote FAS
FAS	Remotely	Authenticate initial access and call back to OpenNDS http handler http_microhttpd.c and feeding Authmon regular check in every 15 seconds

Could you clarify above?

thanks.