Configuring Portal Server Detection And Portal User Information Synchronization - HP 12500 Series Configuration Manual

[SwitchA-acl-adv-3000] rule permit ip destination 192.168.0.0 0.0.0.255
[SwitchA-acl-adv-3000] rule deny ip
[SwitchA-acl-adv-3000] quit
[SwitchA] acl number 3001
[SwitchA-acl-adv-3001] rule permit ip
[SwitchA-acl-adv-3001] quit
Configure portal authentication:
4.
# Configure a portal server on the switch, making sure the IP address, key, port number, and URL
match those of the actual portal server.
[SwitchA] portal server newpt ip 192.168.0.111 key simple portal port 50100 url
http://192.168.0.111:8080/portal
# Enable portal authentication on the interface connecting Switch B.
[SwitchA] interface vlan-interface 4
[SwitchA–Vlan-interface4] portal server newpt method layer3
[SwitchA–Vlan-interface4] quit
On Switch B, you must configure a default route to subnet 192.168.0.0/24, setting the next hop to
20.20.20.1. (Details not shown.)
Configuring portal server detection and portal user information
synchronization
Network requirements
As shown in
the Internet. A RADIUS server serves as the authentication server.
The host is assigned a public network IP address either manually or through DHCP. Before passing portal
authentication, the host can access only the portal server. After passing portal authentication, the host
can access the Internet.
The switch can detect whether the portal server is reachable and send trap messages upon the portal
server's reachability state changes. When the portal server is unreachable due to, for example, a
connection failure, network device failure, or portal server failure, the switch can disable portal
authentication, allowing users to access the Internet without authentication.
The switch can synchronize portal user information with the portal server periodically.
Figure 50 Network diagram
Figure 50, a host is connected to the switch and must pass portal authentication to access
135