Portal Configuration Commands; Access-User Detect - HPE FlexNetwork HSR6800 Security Command Reference

Portal configuration commands

Portal on VLAN interfaces does not support accounting. Portal on other types of interfaces supports
accounting.

access-user detect

Use access-user detect to configure the online portal user detection function.
Use undo access-user detect to restore the default.
Syntax
access-user detect type { arp | icmp } retransmit number interval interval [ idle-time idletime ]
undo access-user detect
Default
The portal user detection function is not configured on an interface.
Views
Interface view
Default command level
2: System level
Parameters
type arp: Uses ARP requests as probe packets.
type icmp: Uses ICMP requests as probe packets.
retransmit number: Specifies the maximum number of times the device sends probe packets to a
user before it receives a reply from the user. If this number is reached but the device still receives no
reply from the portal user, the device considers that the portal user offline and logs out the user. The
value for the number argument ranges from 2 to 5.
interval interval: Specifies the interval for sending probe packets, in the range of 5 to 120, in
seconds.
idle-time idletime: Specifies the user idle timeout. If the interface receives no user traffic within the
configured idle time, the specified probe begins. The value range for the idletime argument is 1 to
600 minutes, and the default is 3 minutes.
Usage guidelines
When this function is configured on an interface, the interface starts an idle timer. If the interface has
not received packets from a portal user when the idle timer expires, the device sends probe packets
to the portal user. If the device has not received a reply from the portal user when the maximum
number of probes is reached, the device logs off the portal user. If the device receives a reply from
the portal user before the maximum number of probes is reached, it stops sending probe packets
and restarts the idle timer. The device repeats the process to detect whether portal users are online.
Cross-subnet portal authentication does not support ARP probe.
Examples
# Configure the portal user detection function on interface GigabitEthernet 3/0/1, specifying the
probe packets as ARP requests, maximum number of probe attempts as 3, and probe interval as 10
seconds.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/0/1
140