Allowing Only Users With Dhcp-Assigned Ip Addresses To Pass Portal Authentication; Enabling Outgoing Packets Filtering On A Portal-Enabled Interface; Configuring Portal Detection Features; Configuring Online Detection Of Portal Users - HPE FlexNetwork 10500 Series Security Configuration Manual

Allowing only users with DHCP-assigned IP addresses to
pass portal authentication
This feature allows only users with DHCP-assigned IP addresses to pass portal authentication.
Users with static IP addresses cannot pass portal authentication to come online. Use this feature to
ensure that only users with valid IP addresses can access the network.
To allow only users with DHCP-assigned IP addresses to pass portal authentication:
Step
1. Enter system view.
2. Enter interface view.
3. Allow only users with
DHCP-assigned IP
addresses to pass
portal authentication.
Enabling outgoing packets filtering on a portal-enabled
interface
When you enable this feature on a portal-enabled interface, the device permits the interface to send
the following packets:
•
Packets whose destination IP addresses are IP addresses of authenticated portal users.
•
Packets that match portal-free rules.
Other outgoing packets on the interface are dropped.
To enable outgoing packets filtering on a portal-enabled interface:
Step
1. Enter system view.
2. Enter interface view.
3. Enable outgoing packets
filtering.

Configuring portal detection features

Configuring online detection of portal users

Configure online detection to quickly detect abnormal logouts of portal users.
•
Configure ARP or ICMP detection for IPv4 portal users.
•
Configure ND or ICMPv6 detection for IPv6 portal users.
If the device receives no packets from a portal user within the idle time, the device detects the user's
online status as follows:
Command
system-view
interface interface-type
interface-number
portal [ ipv6 ] user-dhcp-only
Command
system-view
interface interface-type
interface-number
portal [ ipv6 ] outbound-filter
enable
186
Remarks
N/A
N/A
By default, both users with IP
addresses obtained through DHCP
and users with static IP addresses
can pass authentication to come
online.
Remarks
N/A
N/A
By default, outgoing packets filtering
is disabled. The interface can send
any packets.