Huawei Quidway S3500 Series Operation Manual page 498

Operation Manual - Security
Quidway S3500 Series Ethernet Switches
II. Network diagram
User PC User PC User PC User PC User PC User PC User PC User PC User PC
Figure 2-5 Network diagram for authentication-free users and free IP addresses
III. Configuration procedure
Note:
Because the following configuration is based on the configurations in section 2.2.3 ,
the same configurations are not described here.
1) Configure authentication-free users
# Configure VLAN 4, and enable Portal on VLAN interface 4.
[Quidway] vlan 4
[Quidway-vlan4] port ethernet 0/4
[Quidway-vlan4] quit
[Quidway] interface vlan-interface 4
[Quidway-Vlan-interface4] ip address 192.166.1.1 255.255.0.0
[Quidway-Vlan-interface4] portal newp
[Quidway-Vlan-interface4] quit
# Configure Server1 as an authentication-free user.
[Quidway] portal free-user mac 00E0-FC01-0101 ip 192.166.1.200 vlan 4 interface
ethernet 0/4
2) Configure free IP
# Add ethernet 0/5 port to the VLAN 2 configured in section 2.2.3 .
[Quidway] vlan 2
Vlan -interface 2 Vlan -interface 2 Vlan -interface 2 Vlan -interface 2 Vlan -interface 2
192.168.1.160/16 192.168.1.160/16 192.168.1.160/16 192.168.1.160/16 192.168.1.160/16
Switch Switch Switch Switch Switch Switch Switch Switch Switch
VLAN 2 VLAN 2 VLAN 2 VLAN 2 VLAN 2
Ethernet0/5 Ethernet0/5 Ethernet0/5 Ethernet0/5 Ethernet0/5
Ethernet0/4 Vlan -interface 4 Ethernet0/4 Vlan -interface 4 Ethernet0/4 Vlan -interface 4 Ethernet0/4 Vlan -interface 4 Ethernet0/4 Vlan -interface 4
192.166.1.1/16 192.166.1.1/16 192.166.1.1/16 192.166.1.1/16 192.166.1.1/16
Server2 Server2 Server2 Server2 Server2
192.166.1.200/16;MAC:00E0 192.166.1.200/16;MAC:00E0 192.166.1.200/16;MAC:00E0-FC01-0101 192.166.1.200/16;MAC:00E0-FC01-0101 192.166.1.200/16;MAC:00E0 -FC01 -0101 -FC01 -0101 -FC01 -0101
Huawei Technologies Proprietary
Portal server Portal server Portal server Portal server Portal server Portal server Portal server Portal server Portal server
192.168.1.200/16 192.168.1.200/16 192.168.1.200/16 192.168.1.200/16 192.168.1.200/16 192.168.1.200/16 192.168.1.200/16 192.168.1.200/16 192.168.1.200/16
RADIUS RADIUS RADIUS authentication/accounting server RADIUS authentication/accounting server RADIUS RADIUS RADIUS RADIUS RADIUS authentication/accounting server
192.168.1.100/16 192.168.1.100/16 192.168.1.100/16 192.168.1.100/16 192.168.1.100/16 192.168.1.100/16 192.168.1.100/16 192.168.1.100/16 192.168.1.100/16
Internal server1 Internal server1 Internal server1 Internal server1 Internal server1 Internal server1 Internal server1 Internal server1
192.168.1.300/16 192.168.1.300/16 192.168.1.300/16 192.168.1.300/16 192.168.1.300/16 192.168.1.300/16 192.168.1.300/16 192.168.1.300/16
- -
2-13
Chapter 2 Portal Configuration