Arp Packet Handshaking Between Switch And User's Pc; Portal Rate Limitation; Portal Configurations; Configuration Prerequisites - Huawei Quidway S3500 Series Operation Manual

Operation Manual - Security
Quidway S3500 Series Ethernet Switches
Authentication-free user information contains the IP address, MAC address, connected
switch port and VLAN. Only the user whose information fully matches the
authentication-free user information can be allowed to access the Internet without
authentication.
II. Free IP addresses
Free IP addresses are the addresses which users can access without limitation. You
can set the IP address for the free network site provided by Internet service providers
(ISPs) as the free IP address. All users can access these free IP addresses without
limitation.

2.1.6 ARP Packet Handshaking Between Switch and User's PC

After users pass direct authentication or re-DHCP authentication, switches make a
handshake with users' PCs through address resolution protocol (ARP) packets. If
finding abnormal handshake, the switches can disconnect from the users' PCs and
notify the Portal servers of the abnormality.

2.1.7 Portal Rate Limitation

Portal rate limitation works together with the bandwidth restriction service provided by
CAMS servers. The bandwidth restriction service refers to the specified bandwidth
available for Portal users when you configure the service available for users on CAMS
servers.
Portal rate limitation works on this principle: After receiving the rule to restrict Portal
users' bandwidth from the CAMS servers, switches restrict traffic on the specified uplink
ports. That is, the switches control the Portal users' uplink rate.
Note:
Uplink ports refer to the ports by which switches connect to the uplink network devices.

2.2 Portal Configurations

2.2.1 Configuration Prerequisites

Before configuring Portal, you should do the following:
Create a VLAN, which the VLAN interface for enabling Portal is assigned to. And then
configure a legal IP address for the VLAN interface.
The 802.1x protocol is disabled on switches.
Huawei Technologies Proprietary
2-4
Chapter 2 Portal Configuration