Configuring Portal Server Detection And Portal User Synchronization - HP MSR2000 Configuration Manual

NOTE:
Make sure you specify ACL 3000 as the isolation ACL and ACL 3001 as the security ACL on the security
policy server.
4. Configure portal authentication:
# Configure a portal authentication server.
[RouterA] portal server newpt
[RouterA-portal-server-newpt] ip 192.168.0.111 key simple portal
[RouterA-portal-server-newpt] port 50100
[RouterA-portal-server-newpt] quit
# Configure a portal Web server.
[Router] portal web-server newpt
[RouterA-portal-websvr-newpt] url http://192.168.0.111:8080/portal
[RouterA-portal-websvr-newpt] quit
# Enable cross-subnet portal authentication on interface Ethernet 1/2.
[RouterA] interface ethernet 1/2
[RouterA–Ethernet1/2] portal enable method layer3
# Reference the portal Web server newpt on interface Ethernet 1/2.
[RouterA–Ethernet1/2] portal apply web-server newpt
# Configure the BAS-IP as 20.20.20.1 for portal packets sent from Ethernet 1/2 to the portal
authentication server.
[RouterA–Ethernet1/2] portal bas-ip 20.20.20.1
[RouterA–Ethernet1/2] quit
On Router B, configure a default route to subnet 192.168.0.0/24, specifying the next hop address as
20.20.20.1. (Details not shown.)
Configuring portal server detection and portal user
synchronization
Network requirements
As shown in
assigned with a public IP address either manually or through DHCP. A portal server serves as both a
portal authentication server and a portal Web server. A RADIUS server serves as the
authentication/authorization server.
Configure direct portal authentication on the router, so the host can access only the portal server before
passing the authentication and access Internet resources after passing the authentication.
Configure the router to detect the reachability state of the portal authentication server, send log messages
upon state changes, and disable portal authentication when the authentication server is unreachable.
Configure the router to synchronize portal user information with the portal server periodically.
Figure 99, the host is directly connected to the router (the access device). The host is
327