Configuring Layer 3 Portal Authentication With Extended Functions - H3C S5120-EI Series Operation Manual

Hide thumbs Also See for S5120-EI Series:

Table of Contents

IP address: 192.168.0.111

Port number: 50100

URL: http://192.168.0.111/portal.

[Switch] portal server newpt ip 192.168.0.111 key portal port 50100

url http://192.168.0.111/portal

# Configure the switch as a DHCP relay agent, and enable the invalid address check function.

[Switch] dhcp enable

[Switch] dhcp relay server-group 0 ip 192.168.0.112

[Switch] interface vlan-interface 100

[Switch–Vlan-interface100] ip address 20.20.20.1 255.255.255.0

[Switch–Vlan-interface100] ip address 10.0.0.1 255.255.255.0 sub

[Switch-Vlan-interface100] dhcp select relay

[Switch-Vlan-interface100] dhcp relay server-select 0

[Switch-Vlan-interface100] dhcp relay address-check enable

# Enable re-DHCP portal authentication on the interface connecting the host.

[Switch–Vlan-interface100] portal server newpt method redhcp

[Switch–Vlan-interface100] quit

# Configure the IP address of the interface connected with the portal server.

[Switch] interface vlan-interface 2

[Switch–Vlan-interface2] ip address 192.168.0.100 255.255.255.0

[Switch–Vlan-interface2] quit

Configuring Layer 3 Portal Authentication with Extended Functions

Network requirements

Switch A is configured for Layer 3 extended portal authentication. When users have passed identity

authentication but have not passed security authentication, they can access only subnet

192.168.0.0/24. After passing security authentication, they can access unrestricted Internet

The host accesses Switch A through Switch B.

A RADIUS server serves as the authentication/accounting server.

Figure 1-9 Configure Layer 3 portal authentication with extended functions

Table of Contents