Configuring Layer 3 Portal Authentication With Extended Functions - H3C S9500 Series Operation Manual

Operation Manual – Portal
H3C S9500 Series Routing Switches
III. Configuration procedure
Note:
The following only lists configurations about the re-DHCP portal authentication. For
configurations about RADIUS scheme, ISP domain, and portal server, refer to
Portal Direct Authentication Method Configuration
For configuration on the DHCP server, refer to
Method Configuration
You need to configure IP addresses for the devices as shown in
ensure that routes are available between the devices.
Configure the switch:
# Configure the portal running method as re-DHCP authentication.
[H3C] portal method redhcp
# Configure the IP address of VLAN-interface 100.
[H3C] interface vlan-interface 100
[H3C–Vlan-interface100] ip address 20.20.20.1 255.255.255.0
[H3C–Vlan-interface100] ip address 10.0.0.1 255.255.255.0 sub
# Enable the DHCP relay address check function. (You need to specify the IP address
of a VLAN interface that is in the up state for ip relay address.)
[H3C-Vlan-interface100] dhcp select relay
[H3C-Vlan-interface100] ip relay address 192.168.0.112
[H3C1-Vlan- interface100] dhcp relay security address-check enable
# Enable portal authentication on the interface connecting the host.
[H3C–Vlan-interface100] portal newpt
[H3C–Vlan-interface100] quit
# Configure the IP address of the interface connected with the portal server.
[H3C] interface vlan-interface 2
[H3C–Vlan-interface2] ip address 192.168.0.100 255.255.255.0
[H3C–Vlan-interface2] quit

1.2.8 Configuring Layer 3 Portal Authentication with Extended Functions

I. Network requirements
Switch A is configured for extended Layer 3 portal authentication. When users
have passed identity authentication but have not passed security authentication,
Example.
1-17
Chapter 1 Portal Configuration
Example.
Portal ReDHCP Authentication
Figure 1-6 and