Setting The Maximum Number Of Portal Users; Specifying A Portal Authentication Domain - HP FlexFabric 5700 Series Security Configuration Manual

You can configure multiple authentication destination subnets. If the destination subnets overlap, the
subnet with the largest address scope (with the smallest mask or prefix) takes effect.
To configure an IPv4 portal authentication destination subnet:
Step
1. Enter system view.
2. Enter interface view.
3. Configure an IPv4
portal authentication
destination subnet.
To configure an IPv6 portal authentication destination subnet:
Step
1. Enter system view.
2. Enter interface view.
3. Configure an IPv6
portal authentication
destination subnet.

Setting the maximum number of portal users

Perform this task to control the total number of login IPv4 and IPv6 portal users in the system.
If the maximum number of portal users you set is less than that of the current login portal users, the limit
can be set successfully and does not impact the login portal users. However, the system does not allow
new portal users to log in until the number drops down below the limit.
Step
1. Enter system view.
2. Set the maximum number of
portal users.

Specifying a portal authentication domain

An authentication domain defines a set of authentication, authorization, and accounting policies. Each
portal user belongs to an authentication domain and is authenticated, authorized, and accounted in the
domain.
After you specify a portal authentication domain on an interface, the device uses the specified
authentication domain for AAA of all portal users on the interface, ignoring the domain names carried
in the usernames. This allows for flexible portal access control.
Command
system-view
interface interface-type interface-number
portal free-all except destination
ipv4-network-address { mask-length |
mask }
Command
system-view
interface interface-type interface-number
portal ipv6 free-all except destination
ipv6-network-address prefix-length
Command
system-view
portal max-user max-number
129
Remarks
N/A
N/A
By default, no IPv4 portal
authentication destination subnet is
configured, and users accessing any
subnets must pass portal
authentication.
Remarks
N/A
N/A
By default, no IPv6 portal
authentication destination subnet is
configured, and users accessing any
subnets must pass portal
authentication.
Remarks
N/A
By default, no limit is set on the
number of portal users.