HP 6600 Security Configuration Manual page 84

Figure 26 Associating the portal device with IP address group
5. Select User Access Manager > Service Parameters > Validate from the navigation tree to validate
the configurations.
Configuring the router
1. Configure a RADIUS scheme:
# Create a RADIUS scheme named rs1 and enter its view.
<Router> system-view
[Router] radius scheme rs1
# Set the server type for the RADIUS scheme. When using IMC, set the server type to extended.
[Router-radius-rs1] server-type extended
# Specify the primary authentication server, service port number, and shared key for secure
authentication/authorization communication.
[Router-radius-rs1] primary authentication 10.1.1.1
[Router-radius-rs1] key authentication expert
# Include the domain names in usernames sent to the RADIUS server.
[Router-radius-rs1] user-name-format with-domain
[Router-radius-rs1] quit
Configure an authentication domain:
# Create an ISP domain named dm1 and enter its view.
[Router] domain dm1
# Configure the ISP domain to use RADIUS scheme rs1.
[Router-isp-dm1] authentication portal radius-scheme rs1
[Router-isp-dm1] authorization portal radius-scheme rs1
[Router-isp-dm1] quit
# Configure dm1 as the default ISP domain for all users. Then, if a user enters a username without
any ISP domain at login, the authentication/authorization methods of the default domain will be
used for the user.
[Router] domain default enable dm1
Configure portal authentication:
# Configure the portal server.
[Router] portal server newpt ip 10.1.1.1 key portal port 50100 url
http://10.1.1.1:8080/portal
70