H3C S9500 Series Operation Manual page 1247

Operation Manual – Portal
H3C S9500 Series Routing Switches
they can access only subnet 192.168.0.0/24. After passing security authentication,
they can access unrestricted Internet resources.
The host accesses Switch A through Switch B.
A RADIUS server serves as the authentication/accounting server.
II. Network diagram
Figure 1-7 Configure Layer 3 portal authentication with extended functions
III. Configuration procedure
Note:
You need to configure IP addresses for the devices as shown in
ensure that routes are available between the devices.
The following only lists configurations about the Layer 3 portal authentication. For
configurations about RADIUS scheme, ISP domain, and ACL, refer to
Authentication Method Configuration
Configure Switch A:
# Configure the portal running method as Layer 3 portal authentication.
[SwitchA] portal method layer3
# Enable portal authentication on the interface connecting Switch B.
[SwitchA] interface vlan-interface 4
[SwitchA–Vlan-interface4] ip address 20.20.20.1 255.255.255.0
[SwitchA–Vlan-interface4] portal newp
[SwitchA–Vlan-interface4] quit
# Configure the IP address of the interface connected with the portal server.
[SwitchA] interface vlan-interface 2
Example.
1-18
Chapter 1 Portal Configuration
Figure 1-7
Portal Direct
and