Configuring Extended Direct Portal Authentication - HP MSR Series Configuration Manual

IP address
A user can perform portal authentication by using the HPE iNode client or through Web page. Before
passing the
http://192.168.0.111:8080/portal. All Web requests from the user will be redirected to the
authentication page. After passing the authentication, the user can access Internet resources.
# After the user passes authentication, use the following command to display information about the
portal user.
[Router] display portal user interface gigabitethernet 2/0/2
Total portal users: 1
Username: abc
Portal server: newpt
State: Online
VPN instance: N/A
MAC
0015-e9a6-7cfe
Authorization information:
DHCP IP pool: N/A
Session group profile: N/A
ACL: N/A
CAR: N/A

Configuring extended direct portal authentication

Network requirements
As shown in
assigned with a public IP address either manually or through DHCP. A portal server acts as both a
portal authentication server and a portal Web server. A RADIUS server acts as the
authentication/accounting server.
Configure extended direct portal authentication. If the host fails security check after passing identity
authentication, it can access only subnet 192.168.0.0/24. After passing security check, the host can
access Internet resources.
Figure 64 Network diagram
Configuration prerequisites
•
Configure IP addresses for the host, router, and servers as shown in
they can reach each other.
authentication, the
IP
8.8.8.2
Figure 64, the host is directly connected to the router (the access device). The host is
user can access
VLAN Interface
-- GigabitEthernet2/0/2
173
Prefix length
only the authentication
Figure 64 and make sure
page