Specifying A Source Ip Address For Outgoing Portal Packets; Configuring Portal Stateful Failover - HP 6600 Security Configuration Manual

Specifying a source IP address for outgoing portal
packets
After you specify a source IP address for outgoing portal packets on an interface, the IP address is used
as the source IP address of packets that the access device sends to the portal server, and the destination
IP address of packets that the portal server sends to the access device.
To specify a source IP address for outgoing portal packets:
Step
1. Enter system view.
2. Enter interface
view.
3. Specify a source IP
address for
outgoing portal
packets.

Configuring portal stateful failover

CAUTION:
Specifying or changing the device ID of a device will log off all online users on the device. Therefore,
•
perform the configuration only when necessary and, after the configuration, save the configuration and
restart the device.
• When two devices are running in stateful failover mode (one active, the other standby), do not delete the
configured backup source IP addresses. Otherwise, online users on the backup may not be able to
receive packets from the server.
The following matrix shows the feature and router compatibility:
Feature
Portal stateful failover
To implement stateful failover for portal, configure VRRP for traffic switchover, and perform the following
configurations for service backup on each of the two devices that back up each other:
Specify an interface for backing up portal services, which is referred to as portal service backup
•
interface in this document, and enable portal on the portal service backup interface. The portal
service backup interface is different from the stateful failover interface. Stateful failover interfaces
only forward state negotiation messages and backup data.
Command
system-view
interface interface-type
interface-number
portal nas-ip ip-address
6602 HSR6602
Yes Yes
140
Remarks
N/A
N/A
Optional.
By default, no source IP address is specified and
the IP address of the user logon interface is used as
the source IP address of outgoing portal packets.
In NAT environments, HP recommends specifying
the interface's public IP address as the source IP
address of outgoing portal packets.
6604/6608/6616
No