H3C S9500E Series Security Configuration Manual page 10

Configuring the online user handshake function ········································································································ 78
Enabling the multicast trigger function ························································································································· 79
Specifying a mandatory authentication domain for a port ······················································································· 79
Enabling the quiet timer················································································································································· 80
Enabling the re-authentication function ························································································································ 80
Configuring a guest VLAN ············································································································································ 80
Configuring an Auth-Fail VLAN ···································································································································· 81
Displaying and maintaining 802.1X ··························································································································· 82
802.1X configuration example ···································································································································· 82
Guest VLAN and VLAN assignment configuration example ····················································································· 85
MAC authentication configuration ···························································································································· 88
MAC authentication overview ······································································································································ 88
RADIUS-based MAC authentication ···················································································································· 88
Local MAC authentication ···································································································································· 88
Related concepts ···························································································································································· 89
MAC authentication timers ··································································································································· 89
Quiet MAC address ·············································································································································· 89
Configuring MAC authentication ································································································································· 89
Configuration prerequisites ·································································································································· 89
Configuration procedure ······································································································································ 89
Displaying and maintaining MAC authentication ······································································································ 90
MAC authentication configuration examples ·············································································································· 91
Local MAC authentication configuration ············································································································ 91
RADIUS-based MAC authentication configuration ···························································································· 92
Portal configuration ···················································································································································· 95
Introduction to portal ············································································································································· 95
Introduction to extended portal functions ············································································································ 95
Portal system components ····································································································································· 95
Portal authentication mode ··································································································································· 97
Portal authentication process ······························································································································· 98
Basic portal configuration ············································································································································· 99
Configuration prerequisites ·································································································································· 99
Configuration procedure ······································································································································ 99
Configuring a portal-free rule ····································································································································· 100
Configuring an authentication subnet ························································································································ 101
Logging out users ························································································································································· 101
Specifying a mandatory authentication domain ······································································································· 101
Specifying a NAS ID profile for an interface ············································································································ 102
Setting the maximum number of online portal users ································································································ 103
Displaying and maintaining a portal ························································································································· 103
Portal configuration examples ···································································································································· 104
Configuring Layer 3 portal authentication ········································································································ 104
Configuring Layer 3 portal authentication with extended functions ······························································ 106
10