HPE FlexNetwork 10500 Series Security Configuration Manual page 617

Figure 166 Network diagram
Host
2.2.2.2/24
Configuration prerequisites
•
Assign IP addresses to the host and the device as shown in
and the device can reach each other.
•
Customize the authentication pages, compress them to a file, and upload the file to the root
directory of the storage medium of the switch. In this example, the file is abc.zip.
Configuration procedure
1. Create VLANs, assign IP addresses to the VLAN interfaces, and assign interfaces to the
VLANs. (Details not shown.)
2. Configure a local user:
# Create a local network access user named localuser.
<Device>system-view
[Device] local-user localuser class network
# Set the password to localpass in plaintext form for user localuser.
[Device-luser-network-localuser] password simple localpass
# Authorize the user to use LAN access services.
[Device-luser-network-localuser] service-type lan-access
[Device-luser-network-localuser] quit
3. Configure an ISP domain:
# Create an ISP domain named local.
[Device] domain local
# Configure the ISP domain to perform local authentication, authorization, and accounting for
LAN users.
[Device-isp-local] authentication lan-access local
[Device-isp-local] authorization lan-access local
[Device-isp-local] accounting lan-access local
[Device-isp-local] quit
4. Configure a local portal Web server:
# Create a local portal Web server, and configure the server use HTTP to exchange
authentication information with clients.
[Device] portal local-web-server http
# Specify file abc.zip as the default authentication page file for the local portal Web server.
(This file must exist in the root directory of the device.)
[Device-portal-local-websvr-http] default-logon-page abc.zip
# Specify the HTTP listening port number as 80 for the portal Web server.
[Device–portal-local-websvr-http] tcp-port 80
[Device-portal-local-websvr-http] quit
5. Configure Web authentication:
# Create a Web authentication server named user.
Loop0
20.20.0.1/24
Vlan-int100
2.2.2.1/24
GE1/0/1
Device
Internet
Figure
600
166, and make sure the host