Figure 2-2 Network Diagram For Configuring Web Authentication - Huawei Quidway S9300 Configuration Manual

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
Networking Requirements
As shown in
l
l
l
l

Figure 2-2 Network diagram for configuring Web authentication

User
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
4.
5.
Data Preparation
To complete the configuration, you need the following data:
l
l
l
l
l
l
l
Issue 06 (2010–01–08)
Figure 2-2, the requirements are as follows:
The user interacts with the Web authentication server through the S9300.
The authentication is performed by the RADIUS server.
The user can access only the Web authentication server before authentication.
After passing the Web authentication, the user can access the external network.
Web server
192.168.2.20
GE 1/0/1
VLAN 20
GE1/0/0
VLANIF 10
192.168.1.10
Set the IP address of the Layer 3 interface connected to the user.
Configure a RADIUS server template.
Configure an AAA authentication template.
Configure a domain.
Configure the Web authentication function.
IP address and URL of the Web authentication server
IP address of the Layer 3 interface connected to the authentication terminal
IP address and port number of the RADIUS authentication server
Key of the RADIUS server (hello) and the retransmission count (2)
Name of the AAA authentication scheme (web1)
Name of the RADIUS server template (rd1)
Name of the user domain (isp1)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
RADIUS server
192.168.2.30
GE 1/0/2
VLANIF 20
192.168.2.10
GE 2/0/0
S9300
2 NAC Configuration
Internet
2-33