Enabling Outgoing Packets Filtering On A Portal-Enabled Interface; Configuring Portal Detection Features; Configuring Online Detection Of Portal Users - HP FlexNetwork 10500 Series Security Configuration Manual

Step
1. Enter system view.
2. Enter VLAN
interface view.
3. Specify an IPv6
portal authentication
domain.
Enabling outgoing packets filtering on a portal-enabled
interface
When you enable this feature on a portal-enabled interface, the device permits the interface to send
the following packets:
•
Packets whose destination IP addresses are IP addresses of authenticated portal users.
•
Packets that match portal-free rules.
Other outgoing packets on the interface are dropped.
To enable outgoing packets filtering on a portal-enabled interface:
Step
1. Enter system view.
2. Enter interface view.
3. Enable outgoing packets
filtering.

Configuring portal detection features

Configuring online detection of portal users

Configure online detection to quickly detect abnormal logouts of portal users.
•
Configure ARP or ICMP detection for IPv4 portal users.
•
Configure ND or ICMPv6 detection for IPv6 portal users.
If the device receives no packets from a portal user within the idle time, the device detects the user's
online status as follows:
•
ICMP or ICMPv6 detection—Sends ICMP or ICMPv6 requests to the user at configurable
intervals to detect the user status.
If the device receives a reply within the maximum number of detection attempts, it considers
that the user is online and stops sending detection packets. Then the device resets the idle
timer and repeats the detection process when the timer expires.
If the device receives no reply after the maximum number of detection attempts, the device
logs out the user.
•
ARP or ND detection—Sends ARP or ND requests to the user and detects the ARP or ND
entry status of the user at configurable intervals.
Command
system-view
interface interface-type
interface-number
portal ipv6 domain domain-name
Command
system-view
interface interface-type
interface-number
portal [ ipv6 ] outbound-filter
enable
147
Remarks
N/A
N/A
By default, no ISP domain is
specified for IPv6 portal users on
the interface.
Remarks
N/A
N/A
By default, outgoing packets filtering
is disabled. The interface can send
any packets.