MAC authentication configuration examples ············································································································ 108

Local MAC authentication configuration example ·························································································· 108

RADIUS-based MAC authentication configuration example ·········································································· 110

ACL assignment configuration example ··········································································································· 112

Configuring portal ··················································································································································· 115

Extended portal functions ··································································································································· 115

Portal system components ··································································································································· 115

Portal authentication modes ······························································································································· 117

Portal support for EAP ········································································································································· 118

Layer 2 portal authentication process ··············································································································· 119

Layer 3 portal authentication process ··············································································································· 120

Portal stateful failover ·········································································································································· 123

Portal authentication across VPNs ····················································································································· 125

Configuration task list ·················································································································································· 126

Configuration prerequisites ········································································································································· 126

Specifying the portal server ········································································································································ 127

Specifying a portal server for Layer 3 portal authentication ·········································································· 127

Enabling portal authentication ···································································································································· 127

Enabling Layer 3 portal authentication ············································································································· 128

Controlling access of portal users ······························································································································ 128

Configuring a portal-free rule ···························································································································· 128

Configuring an authentication source subnet ··································································································· 129

Setting the maximum number of online portal users ························································································ 130

Specifying the authentication domain for portal users ···················································································· 130

Configuring RADIUS related attributes ······················································································································ 131

Specifying NAS-Port-Type for an interface ······································································································· 131

Specifying a NAS ID profile for an interface ··································································································· 131

Specifying the source IP address for outgoing portal packets ················································································ 132

Configuring portal stateful failover····························································································································· 132

Specifying auto redirection URL for authenticated portal users ·············································································· 134

Configuring portal detection functions ······················································································································· 135

Configuring online Layer 3 portal user detection ···························································································· 135

Configuring the portal server detection function ······························································································ 135

Configuring portal user information synchronization ······················································································ 137

Logging off portal users ··············································································································································· 138

Displaying and maintaining portal ···························································································································· 138

Portal configuration examples ···································································································································· 139

Configuring direct portal authentication ··········································································································· 139

Configuring re-DHCP portal authentication ······································································································ 144

Configuring cross-subnet portal authentication ································································································ 146

Configuring direct portal authentication with extended functions ································································· 148

Configuring re-DHCP portal authentication with extended functions ···························································· 150

Configuring cross-subnet portal authentication with extended functions ······················································· 152

Configuring portal stateful failover ···················································································································· 154

Configuring portal server detection and portal user information synchronization ······································· 163

Cross-subnet portal authentication across VPNs ······························································································ 169

Troubleshooting portal ················································································································································· 171

Inconsistent keys on the access device and the portal server ········································································· 171

Incorrect server port number on the access device·························································································· 172

Configuring port security ········································································································································ 173

Port security features ··········································································································································· 173

Port security modes ············································································································································· 174

Support for guest VLAN and Auth-Fail VLAN ··································································································· 176

Table of Contents