Direct Authentication Configuration Example - 3Com 3C13636 Configuration Manual

3Com Router 3000 Ethernet Family
Configuration Guide

3.2.3 Direct Authentication Configuration Example

I. Network requirements
Configure the router to enable portal authentication. Set the portal operating mode
to direct authentication and the portal server name to newp.
The router uses the RADIUS server to implement authentication and accounting.
Before passing the portal authentication, the user can only access the portal
server. After passing the portal authentication, the user can access the Internet.
II. Network diagram
PC
172.21.1.2/16
Gateway : 172.21.1.1
Figure 3-2 Network diagram for direct authentication
III. Configuration procedure
1) Configure a RADIUS scheme
# Enter system view, create a RADIUS scheme named portal and enter its view.
<3Com> system-view
[3Com] radius scheme portal
# Configure the server type of the RADIUS scheme as portal. Note that you must
configure it as portal.
[3Com-radius-portal] server-type portal
# Configure the primary authentication server, the primary accounting server, and
communication key for the RADIUS scheme.
[3Com-radius-portal] primary authentication 192.168.1.100
[3Com-radius-portal] primary accounting 192.168.1.100
[3Com-radius-portal] key accounting hello
[3Com-radius-portal] key authentication hello
[3Com-radius-portal] user-name-format without-domain
[3Com-radius-portal] quit
2) Configure ISP domain
# Create an ISP domain named portal and enter its view.
Ethernet0/0/0
172.21.1.1/16
3Com Corporation
Ethernet1/0/0
192.168.1.160/16
Portal server
192.168.1.200/16
Radius authentication/accounting server
192.168.1.100/16
3-6
Chapter 3 Portal Configuration