Enabling Portal Roaming - HPE FlexNetwork 10500 Series Security Configuration Manual
Hide thumbs
Also See for FlexNetwork 10500 Series:
- Security command reference (881 pages) ,
- Network management and monitoring command reference (423 pages) ,
- Configuration manual (407 pages)
Table of Contents
Advertisement
To configure the BAS-IP attribute for unsolicited portal packets sent to the portal authentication
server:
Step
1.
Enter system view.
2.
Enter interface view.
3.
Configure BAS-IP for IPv4
portal packets sent to the
portal authentication
server.
4.
Configure BAS-IPv6 for
IPv6 portal packets sent to
the portal authentication
server.
Enabling portal roaming
Portal roaming takes effect only on portal users logging in from VLAN interfaces. It does not take
effect on portal users logging in from common Layer 3 interface.
If portal roaming is enabled on a VLAN interface, an online portal user can access resources from
any Layer 2 port in the VLAN without re-authentication.
If portal roaming is disabled, to access external network resources from a Layer 2 port different from
the current access port in the VLAN, the user must do the following:
•
First log out from the current port.
•
Then re-authenticate on the new Layer 2 port.
To enable portal roaming:
Step
1.
Enter system view.
2.
Enable portal roaming.
Command
system-view
interface interface-type
interface-number
portal bas-ip ipv4-address
portal bas-ipv6 ipv6-address
Command
system-view
portal roaming enable
191
Remarks
N/A
N/A
By default:
•
The BAS-IP attribute of an IPv4
portal response packet sent to the
portal authentication server is the
source IPv4 address of the packet.
•
The BAS-IP attribute of an IPv4
portal notification packet sent to the
portal authentication server is the
IPv4 address of the packet's output
interface.
By default:
•
The BAS-IPv6 attribute of an IPv6
portal response packet sent to the
portal authentication server is the
source IPv6 address of the packet.
•
The BAS-IPv6 attribute of an IPv6
portal notification packet sent to the
portal authentication server is the
IPv6 address of the packet's output
interface.
Remarks
N/A
By default, portal roaming is
disabled.
You cannot enable portal roaming
when online portal users or
preauthentication portal users
exist on the device.
Advertisement
Table of Contents
Troubleshooting
