Configuration Restrictions And Guidelines; Configuration Procedure; Referencing A Portal Web Server For An Interface - HP 5920 Series Configuration Manual

When a portal-enabled interface receives a portal packet, it checks the source IP address and VPN
information of the packet. If the packet matches a locally configured portal authentication server, the
interface regards the packet valid and sends an authentication response packet to the portal
authentication server. Otherwise, the interface drops the packet. After a user logs in to the device, the
user interacts with the portal authentication server as needed.

Configuration restrictions and guidelines

When you enable portal authentication on an interface, follow these restrictions and guidelines:
Make sure the interface has a valid IP address before you enable portal authentication on the
•
interface.
Make sure the device supports IPv6 ACL and IPv6 forwarding before you enable IPv6 portal
•
authentication.
• Do not add the interface enabled with portal authentication to an aggregation group. Otherwise,
portal authentication does not take effect.
Cross-subnet authentication mode (layer3) does not require Layer 3 forwarding devices between
•
the access device and the portal authentication clients. However, if a Layer 3 forwarding device
exists between the authentication client and the access device, you must use the cross-subnet portal
authentication mode.
With re-DHCP portal authentication, HP recommends that you also configure authorized ARP on the
•
interface to make sure only valid users can access the network. With authorized ARP configured on
the interface, the interface learns ARP entries only from the users who have obtained a public
address from DHCP.
An IPv6 portal server does not support the re-DHCP portal authentication mode.
•
You can enable both IPv4 portal authentication and IPv6 portal authentication on an interface.
•

Configuration procedure

To enable portal authentication on an interface:
Step
1. Enter system view.
2. Enter interface view.
3. Enable portal authentication
on the interface.

Referencing a portal Web server for an interface

After you reference a portal Web server for an interface, the device redirects the HTTP requests of the
portal users on the interface to the portal Web server.
Command
system-view
interface interface-type
interface-number
•
To enable IPv4 portal authentication:
portal enable method { direct |
layer3 | redhcp }
•
To enable IPv6 portal authentication:
portal ipv6 enable method { direct |
layer3 }
96
Remarks
N/A
The interface must be a Layer
3 interface.
Enable IPv4 portal
authentication, IPv6 portal
authentication, or both on the
interface.