Configuring Portal Authentication Server Detection - HP 5920 Series Configuration Manual

Step
1. Enter system view.
2. Enter interface view.
3. Configure online
detection of IPv6
portal users.

Configuring portal authentication server detection

During portal authentication, if the communication between the access device and portal authentication
server is broken, both of the following occur:
New portal users are not able to log in.
•
The online portal users are not able to log out normally.
•
To address this problem, the access device needs to be able to detect the reachability changes of the
portal server quickly and take corresponding actions to deal with the changes.
With the portal authentication server detection function, the device periodically detects portal packets
sent by a portal authentication server to determine the reachability of the server.
If the portal authentication server receives a portal packet within a detection timeout (timeout timeout)
and the portal packet is valid, the device considers the portal authentication server is reachable.
Otherwise, the device considers the portal authentication server is unreachable.
You can configure the device to take the following actions when the server reachability status changes:
Sending a log message, which contains the name, the current state, and the original state of the
•
portal authentication server.
• Enabling portal fail-permit. When the portal authentication server is unreachable, the portal
fail-permit feature on an interface allows users on the interface to have network access. When the
server recovers, it resumes portal authentication on the interface. For more information, see
"Configuring the portal fail-permit
Portal packets include user login packets, user logout packets, and heartbeat packets. Only the IMC
portal authentication server supports the heartbeat packet detection. To test server reachability by
detecting heartbeat packets, you must enable the server heartbeat function on the IMC portal
authentication server.
To configure the portal authentication server detection function:
Step
1. Enter system view.
2. Enter portal
authentication server
view.
3. Configure the portal
authentication server
detection function.
Command
system-view
interface interface-type interface-number
portal ipv6 user-detect type { icmpv6 |
nd } [ retry retries ] [ interval interval ]
[ idle time ]
function."
Command
system-view
portal server server-name
server-detect [ timeout timeout ] log
102
Remarks
N/A
N/A
By default, this function is disabled
on the interface.
Remarks
N/A-
N/A
By default, portal authentication
server detection is disabled.
This function takes effect
regardless of whether portal
authentication is enabled on an
interface or not.