Configuring Re-Dhcp Portal Authentication With Extended Functions - HP 10500 Series Configuration Manual

Configuring re-DHCP portal authentication with extended
functions
Network requirements
As shown in
The host is directly connected to the switch and the switch is configured for re-DHCP authentication.
•
The host is assigned with an IP address through the DHCP server. Before passing portal
authentication, the host uses an assigned private IP address. After passing portal authentication, it
can get a public IP address.
• If a user fails security check after passing identity authentication, the user can access only subnet
192.168.0.0/24. After passing the security check, the user can access Internet resources.
A RADIUS server serves as the authentication/accounting server.
•
Figure 64 Network diagram
Configuration procedure
When you configure re-DHCP portal authentication, follow these guidelines:
For re-DHCP portal authentication, configure a public address pool (20.20.20.0/24, in this
•
example) and a private address pool (10.0.0.0/24, in this example) on the DHCP server. (Details
not shown.)
For re-DHCP portal authentication, the switch must be configured as a DHCP relay agent and the
•
portal-enabled interface must be configured with a primary IP address (a public IP address) and a
secondary IP address (a private IP address). For information about DHCP relay agent configuration,
see Layer 3—IP Services Configuration Guide.
Make sure the IP address of the portal device added on the portal server is the public IP address of
•
the interface connecting users (20.20.20.1 in this example), the private IP address range for the IP
address group associated with the portal device is the private network segment where the users
reside (10.0.0.0/24 in this example), and the public IP address range for the IP address group is
the public network segment 20.20.20.0/24.
Configure IP addresses for the switch and servers as shown in
•
switch, and servers can reach each other.
• Configure the RADIUS server properly to provide authentication and accounting functions for users.
Figure 64:
153
Figure 64 and make sure the host,