H3C S9500E Series Security Configuration Manual page 109

access device is not 50100, the destination port of the REQ_LOGOUT message is not the actual
listening port on the server. Thus, the portal server cannot receive the REQ_LOGOUT message. As
a result, you cannot force the user to log out the portal server.
When the user uses the disconnect attribute on the client to log out, the portal server actively
sends a REQ_LOGOUT message to the access device. The source port is 50100 and the
destination port of the ACK_LOGOUT message from the access device is the source port of the
REQ_LOGOUT message so that the portal server can receive the ACK_LOGOUT message
correctly, no matter whether the listening port is configured on the access device. Therefore, the
user can log out the portal server.
Solution
Use the display portal server command to display the listening port of the portal server on the
access device and use the portal server command in the system view to modify it to ensure that
it is the actual listening port of the portal server.
109