Configuring Re-Dhcp Portal Authentication With Extended Functions - HP 3600 v2 Series Security Configuration Manual

[Switch]
http://192.168.0.111:8080/portal
# Enable portal authentication on the interface connecting the host.
[Switch] interface vlan-interface 100
[Switch–Vlan-interface100] portal server newpt method direct
[Switch–Vlan-interface100] quit
Configuring re-DHCP portal authentication with extended
functions
Network requirements
As shown in
The host is directly connected to the switch and the switch is configured for re-DHCP authentication.
•
The host is assigned with an IP address through the DHCP server. Before passing portal
authentication, the host uses an assigned private IP address. After passing portal authentication, the
host can get a public IP address.
If the host fails security check after passing identity authentication, the host can access only subnet
•
192.168.0.0/24. After passing the security check, the host can access Internet resources.
A RADIUS server serves as the authentication/accounting server.
•
Figure 70 Network diagram
Host
automatically obtains
an IP address
Configuration procedure
portal server newpt
Figure 70:
Vlan-int100
20.20.20.1/24 Vlan-int2
10.0.0.1/24 sub 192.168.0.100/24
Switch
ip 192.168.0.111
Portal server
192.168.0.111/24
Security policy server
192.168.0.114/24
167
key portal port
DHCP server
192.168.0.112/24
RADIUS server
192.168.0.113/24
50100 url