Enabling Layer 2 Portal Authentication - HP 5120 EI Switch Series Configuration Manual

Configure the SSL server policy, and specify the PKI domain to be used, which is configured in the

above step. For more information, see the chapter ―SSL configuration.‖
When you specify the protocol for the local portal server to support, the local portal server will load the
default authentication page file, which is supposed to be saved in the root directory of the device. To
ensure that the local portal server uses the user-defined default authentication pages, you need to edit
and save them properly. Otherwise, the system default authentication pages will be used.
Configuration procedure
Follow these steps to configure the local portal server:
To do...
Enter system view
Configure the protocol type for
the local portal server to support
and load the default
authentication page file
Configure the welcome banner of
the default authentication pages
of the local portal server

Enabling Layer 2 portal authentication

Only after you enable portal authentication on an access interface can the access interface perform
portal authentication on connected clients.
Before enabling Layer 2 portal authentication, make sure that the listening IP address of the local portal
server is specified.
Follow these steps to enable Layer 2 portal authentication:
To do...
Enter system view
Enter Layer 2 Ethernet interface
view
Enable Layer 2 portal
authentication on the port
NOTE:

To ensure normal operation of portal authentication on a Layer 2 port, HP does not recommend you to enable
port security, guest VLAN of 802.1X, or EAD fast deployment of 802.1X on the port.

To support assignment of authorized VLANs, you must enable the MAC-based VLAN function on the port.
Use the command...
system-view
portal local-server { http | https
server-policy policy-name }
portal server banner banner-string
Use the command...
system-view
interface interface-type interface-
number
portal local-server enable
118
Remarks
—
Required
By default, the local portal server
does not support any protocol.
Optional
No welcome banner by default.
Remarks
—
—
Required
Not enabled by default.