NOTE:
Portal authentication configured on MCE devices can also support authentication across VPNs. For
•
information about MCE, see
•
For information about AAA implementation across VPNs, see the chapter "AAA configuration."
This feature is not applicable to VPNs with overlapping address spaces.
•
Portal configuration task list
Complete these tasks to configure Layer 2 portal authentication:
Task
Specifying the local portal server for Layer 2 portal authentication
Configuring the local portal server
Enabling Layer 2 portal authentication
Controlling access of portal
users
Specifying an Auth-Fail VLAN for portal authentication
Specifying an auto redirection URL for authenticated portal users
Configuring online Layer 2 portal user detection
Logging off portal users
Complete these tasks to configure Layer 3 portal authentication:
Task
Specifying a portal server for Layer 3 portal authentication
Configuring the local portal server
Enabling Layer 3 portal authentication
Controlling access of portal
users
Configuring RADIUS related
attributes
Specifying a source IP address for outgoing portal packets
Layer 3 - IP Routing Configuration Guide
Customizing authentication pages
Configuring the local portal server
Configuring a portal-free rule
Setting the maximum number of online portal users
Specifying an authentication domain for portal
users
Enabling support for portal user moving
Configuring a portal-free rule
Configuring an authentication source subnet
Setting the maximum number of online portal users
Specifying an authentication domain for portal users
Configuring Layer 3 portal authentication to support
web proxy
Specifying NAS-Port-Type for an interface
Specifying a NAS ID profile for an interface
135
.
Remarks
Required
Optional
Required
Required
Optional
Optional
Optional
Optional
Optional
Remarks
Required
Optional
Required
Optional
Optional
Optional