Configuring Web Redirect; Applying A Nas-Id Profile To An Interface - HPE FlexNetwork 7500 Series Security Configuration Manual

Step
1. Enter system view.
2. Log out IPv4 online portal users.
3. Log out IPv6 online portal users.

Configuring Web redirect

Web redirect is a simplified portal feature. With Web redirect, a user does not perform portal
authentication but is directly redirected to the specified URL on the first Web access attempt in a
browser. After the specified redirect interval, the user is redirected from the visiting website to the
specified URL again.
Web redirect can provide ISPs with extended services. For example, the ISPs can place
advertisements and publish information on the redirected webpage.
On Etherchannel interfaces, both Web redirect and portal authentication can be enabled at the same
time. When portal authentication and Web redirect are both enabled on an interface, the device
redirects users on the interface as follows:
•
The device redirects the first HTTP request of a user to the specified URL. Then, the device
redirects the next HTTP request of the user to the portal authentication page. After the user logs
out, the user is redirected to the specified URL again at the first Web access.
•
After the specified redirect interval, a user is redirected to the specified URL regardless of
whether the user is online or not. This process does not cause online users to be offline.
When you configure Web redirect, follow these restrictions and guidelines:
•
Web redirect does not work when both Web redirect and portal authentication are enabled.
•
The Web redirect feature takes effect only on HTTP packets that use the default port number
80.
To configure Web redirect:
Step
1. Enter system view.
2. Enter interface view.
3. Configure Web
redirect.

Applying a NAS-ID profile to an interface

By default, the device sends its device name in the NAS-Identifier attribute of all RADIUS requests.
A NAS-ID profile enables you to send different NAS-Identifier attribute strings in RADIUS requests
from different VLANs. The strings can be organization names, service names, or any user
categorization criteria, depending on the administrative requirements.
For example, map the NAS-ID companyA to all VLANs of company A. The device will send
companyA in the NAS-Identifier attribute for the RADIUS server to identify requests from any
Company A users.
Command
system-view
portal delete-user { ipv4-address | all | interface interface-type
interface-number }
portal delete-user { all | interface interface-type interface-number |
ipv6 ipv6-address }
Command
system-view
interface interface-type
interface-number
web-redirect [ ipv6 ] url url-string
[ interval interval ]
176
Remarks
N/A
N/A
By default, Web redirect is disabled.