Re-Dhcp Authentication Configuration Example - Huawei Quidway S3500 Series Operation Manual

Operation Manual - Security
Quidway S3500 Series Ethernet Switches
# Configure the ISP domain to use the RADIUS scheme named portal.
[Quidway-isp-portal] radius-scheme portal
[Quidway-isp-portal] quit
# Configure the default ISP domain as portal (optional).
[Quidway] domain default enable portal
3) Configure Portal authentication
# Configure the Portal server: The name is newp, the IP address is 192.168.1.200, the
key is huawei, the port is 50100, and the uniform resource locator (URL) is
http://192.168.1.200/port.
[Quidway] portal server newp ip 192.168.1.200 key huawei port 50100 url
http://192.168.1.200/port
# Configure the Portal operating mode as direct authentication.
[Quidway] portal method direct
4) Enable Portal authentication on the VLAN interface connecting to the user PC
# Configure VLAN 2.
[Quidway] vlan 2
[Quidway-vlan2] port ethernet 0/1 ethernet 0/2
[Quidway] interface vlan-interface 2
[Quidway-Vlan-interface2] ip address 192.168.1.160 255.255.0.0
[Quidway-Vlan-interface2] quit
# Configure VLAN 3.
[Quidway] vlan 3
[Quidway-vlan3] port ethernet 0/3
[Quidway-vlan3] quit
[Quidway] interface vlan-interface 3
[Quidway-Vlan-interface3] ip address 172.21.1.1 255.255.0.0
# Enable Portal authentication on VLAN interface 3.
[Quidway-Vlan-interface3] portal newp

2.2.4 Re-DHCP Authentication Configuration Example

I. Network requirements
Configure Portal authentication for the switch, and configure the Portal operating
mode as re-DHCP authentication.
Configure an address pool on the DHCP server: 172.21.0.0/16 (public network)
and 18.21.0.0/16 (private network).
Huawei Technologies Proprietary
2-8
Chapter 2 Portal Configuration