Specifying A Preauthentication Domain - HP MSR Series Configuration Manual

Step
3. Specify an IPv4 portal
authentication domain.
To specify an IPv6 portal authentication domain:
Step
1. Enter system view.
2. Enter interface view.
3. Specify an IPv6
portal authentication
domain.

Specifying a preauthentication domain

The preauthentication domain takes effect only on portal users with IP addresses obtained through
DHCP or DHCPv6.
After you configure a preauthentication domain on a portal-enabled interface, the device authorizes
users on the interface as follows:
1. After an unauthenticated user obtains an IP address, the user is assigned with authorization
attributes configured for the preauthentication domain.
The authorization attributes in a preauthentication domain include ACL, session group profile,
and CAR.
An unauthenticated user who is authorized with the authorization attributes in a
preauthentication domain is called a preauthentication user.
2. After the user passes portal authentication, the user is assigned with new authorization
attributes from the AAA server.
3. After the user goes offline, the user is reassigned with the authorization attributes in the
preauthentication domain.
The preauthentication domain does not take effect on interfaces enabled with cross-subnet portal
authentication.
Make sure you specify an existing ISP domain as a preauthentication domain. If the specified ISP
domain does not exist, the device might operate incorrectly.
You must delete a preauthentication domain (by using the undo portal [ ipv6 ] pre-auth domain
command) and reconfigure it in the following situations:
•
You create the ISP domain after specifying it as the preauthentication domain.
•
You delete the specified ISP domain and then re-create it.
To specify a preauthentication domain:
Step
1. Enter system view.
2. Enter interface view.
3. Specify a preauthentication
domain.
Command
portal domain domain-name
Command
system-view
interface interface-type
interface-number
portal ipv6 domain domain-name
Command
system-view
interface interface-type
interface-number
portal [ ipv6 ] pre-auth domain
domain-name
147
Remarks
By default, no ISP domain is
specified for IPv4 portal users on
the interface.
Remarks
N/A
N/A
By default, no ISP domain is
specified for IPv6 portal users on
the interface.
Remarks
N/A
N/A
By default, no preauthentication
domain is specified on an
interface.