Setting The Maximum Number Of Online Portal Users; Specifying An Authentication Domain For Portal Users - HP 5120 SI Series Security Configuration Manual

NOTE:
Configuration of authentication source subnets applies to only cross-subnet authentication. In direct
•
authentication mode, the authentication source subnet is 0.0.0.0/0.
You can configure multiple authentication source subnets by executing the portal auth-network
•
command repeatedly.

Setting the maximum number of online portal users

You can use this feature to control the total number of online portal users in the system.
Follow these steps to set the maximum number of online portal users allowed in the system:
To do...
Enter system view
Set the maximum number
of online portal users
NOTE:
If the maximum number of online portal users specified in the command is less than that of the current
online portal users, the command can be executed successfully and does not impact the online portal
users, but the system does not allow new portal users to log on until the number drops down below the
limit.

Specifying an authentication domain for portal users

After you specify an authentication domain for portal users on an interface, the device uses the
authentication domain for authentication, authorization, and accounting (AAA) of all portal users on the
interface, ignoring the domain names carried in the usernames. This allows you to specify different
authentication domains for different interfaces as needed.
Follow these steps to specify the authentication domain for portal users on an interface:
To do...
Enter system view
Enter interface view
Specify an authentication domain
for portal users on the interface
NOTE:
The device selects the authentication domain for a portal user on an interface in this order: the
authentication domain specified for the interface, the authentication domain carried in the username, and
the system default authentication domain. For information about the default authentication domain, see
the chapter "AAA configuration."
Use the command...
system-view
portal max-user
max-number
Use the command...
system-view
interface interface-type
interface-number
portal domain [ ipv6 ]
domain-name
126
Remarks
—
Required
512 by default
Remarks
—
—
Required
By default, no authentication
domain is specified for portal
users.