Configuring Portal User Information Synchronization - HP 12500 Series Configuration Manual

Sending a trap message—When the status of a portal server changes, the access device sends
a trap message to the network management server. The trap message contains the name and
current state of the portal server.
Sending a log—When the status of a portal server changes, the access device sends a log
message. The log message indicates the portal server's name and its current state and original
state.
Disabling portal authentication (enabling portal authentication bypass)—When the switch
detects that a portal server is unreachable, it disables portal authentication on the interfaces
that use the portal server (allows all portal users on the interfaces to access network resources).
When the access device receives from the portal server portal heartbeat packets or
authentication packets (such as logon requests and logout requests), it re-enables the portal
authentication function.
You can configure any combination of the configuration items described above as needed, with respect
of the following:
If both detection methods are specified, a portal server is considered unreachable as long as one
•
detection method fails, and an unreachable portal server is considered recovered only when both
detection methods succeed.
If multiple actions are specified, the switch executes all the specified actions when the status of a
•
portal server changes.
The detection function configured for a portal server takes effect on an interface only after you
•
enable portal authentication and reference the portal server on the interface.
To configure the portal server detection function:
Step
1. Enter system view.
2. Configure the portal
server detection
function.
The portal heartbeat detection method works only when the portal server supports the portal server
heartbeat function. Only the IMC portal server supports this function. To implement detection with this
method, you also need to configure the portal server heartbeat function on the IMC portal server and
make sure the product of interval and retries is greater than or equal to the portal server heartbeat
interval. HP recommends configuring the interval to be greater than the portal server heartbeat interval
configured on the portal server.

Configuring portal user information synchronization

Once the switch loses communication with a portal server, the portal user information on the switch and
that on the portal server may be inconsistent after the communication resumes. To solve this problem, the
switch provides the portal user information synchronization function. This function is implemented by
sending and detecting the portal synchronization packet. The process is as follows:
The portal server sends the online user information to the switch (access device) in a user
1.
synchronization packet at the user heartbeat interval, which is set on the portal server.
Upon receiving the user synchronization packet, the switch checks the user information carried in
2.
the packet with its own. If the switch finds a nonexistent user in the packet, it informs the portal
server of the information and the portal server will delete the user. If the switch finds that one of its
Command
system-view
portal server server-name server-detect
method { http | portal-heartbeat } * action
{ log | permit-all | trap } * [ interval
interval ] [ retry retries ]
117
Remarks
N/A
Not configured by default.
The portal server specified in the
command must exist.