Configuring A Portal Web Server - HPE FlexNetwork 10500 Series Security Configuration Manual

Do not delete a portal authentication server in use. Otherwise, users authenticated by that server
cannot log out normally.
To configure a portal authentication server:
Step
1. Enter system view.
2. Create a portal
authentication server, and
enter its view.
3. Specify the IP address of
the portal authentication
server.
4. (Optional.) Set the
destination UDP port
number used by the
device to send unsolicited
portal packets to the
portal authentication
server.
5. (Optional.) Specify the
portal authentication
server type.

Configuring a portal Web server

The device supports multiple portal Web servers.
Perform this task to configure the following parameters for a portal Web server:
•
VPN instance of the portal Web server.
•
URL of the portal Web server.
•
Parameters carried in the URL when the device redirects the URL to users.
•
Portal Web server type, which must be the same as the server type the device actually uses.
•
URL redirection match rule.
A URL redirection match rule matches HTTP requests by user-requested URL or User-Agent
information, and redirects the matching HTTP requests to the specified redirection URL.
For a user to successfully access a redirection URL, configure a portal-free rule to allow HTTP
requests destined for the redirection URL to pass. For information about configuring portal-free
rules, see the portal free-rule command.
The url command redirects all HTTP or HTTPS requests from unauthenticated users to the portal
Web server for authentication. The if-match command allows for flexible URL redirection by
redirecting specific HTTP or HTTPS requests to specific redirection URLs. If both commands are
configured for a portal Web server, the if-match command takes priority to perform URL redirection.
To configure a portal Web server:
Step
1. Enter system view.
Command
system-view
portal server server-name
•
To specify an IPv4 portal server:
ip ipv4-address [ vpn-instance
ipv4-vpn-instance-name] [ key
{ cipher | simple } string ]
•
To specify an IPv6 portal server:
ipv6 ipv6-address [ vpn-instance
ipv6-vpn-instance-name] [ key
{ cipher | simple } string ]
port port-number
server-type imc
Command
system-view
176
Remarks
N/A
By default, no portal
authentication servers exist.
Specify an IPv4 portal
authentication server, an IPv6
authentication portal server, or
both.
By default, no portal
authentication server is
specified.
By default, the UDP port
number is 50100.
This port number must be the
same as the listening port
number specified on the portal
authentication server.
By default, the portal
authentication server type is
IMC.
Remarks
N/A