Portal Configuration Task List; Basic Portal Configuration; Configuration Prerequisites - 3Com MSR 50 Series Configuration Manual

Portal Configuration
Task List
Basic Portal
Configuration
Configuration
prerequisites
12 The access device checks ARP packets to see whether the user IP address is
changed. If so, the access device notifies the portal server of the change.
13 The portal server notifies the authentication client of login success.
14 The portal server sends a user IP address change acknowledgment message to the
access device.
For portal+ authentication, in addition to above mentioned steps, the process
includes:
15 The client and the security policy server exchange security information. The
security policy server verifies the security of the access device, for example,
whether anti-virus software is installed, whether virus bases are updated, whether
unauthorized software is installed, or whether OS patches are updated.
16 The security policy server authorizes the user to access unrestricted resources by
security level. The authorization information is stored on the access device and
used by the access device to take control of user access.
Task
"Basic Portal Configuration" on page 1857
"Configuring an Authentication-Free Rule" on page 1858
"Configuring an Authentication Subnet" on page 1859
"Forcing a User to Log Out" on page 1859
"Configuring the Name of the Resource to be Protected" on page
1860
The portal feature provides a solution for user authentication and security
authentication. However, the portal feature cannot implement this solution by
itself. Currently, RADIUS authentication is required to cooperate with the portal
feature to complete user authentication.
The prerequisites for portal authentication are as follows:
The portal-enabled interface is configured with a valid IP address or it has
■
obtained a valid IP address through DHCP.
The portal server and the RADIUS server have been installed and configured
■
properly.
If the re-DHCP authentication mode is adopted, the invalid address check
■
function is enabled on the access device as a DHCP relay, and DHCP server is
installed and configured properly.
If RADIUS authentication is adopted, username and password are configured
■
on the RADIUS server, and the RADIUS client configurations are performed on
the access device. For information about RADIUS client configuration, refer to
"Configuring RADIUS" on page

Portal Configuration Task List

1769.
1857
Remarks
Required
Optional
Optional
Optional
Optional