Configuring Portal Detection Functions; Configuring Online Layer 2 Portal User Detection; Configuring The Portal Server Detection Function - HP 5500 HI Series Configuration Manual

Security
Hide thumbs Also See for 5500 HI Series:
Table of Contents

Advertisement

Step
2.
Specify an auto redirection
URL for authenticated portal
users.

Configuring portal detection functions

Configuring online Layer 2 portal user detection

Only Layer 2 portal authentication supports this feature.
After a Layer 2 portal user gets online, the device starts a detection timer for the user, and checks whether
the user's MAC address entry has been aged out or the user's MAC address entry has been matched (a
match means a packet has been received from the user) at the interval. If the device finds no MAC
address entry for the user or receives no packets from the user during two successive detection intervals,
the device considers that the user has gone offline and clears the authentication information of the user.
To set the Layer 2 portal user detection interval:
Step
1.
Enter system view.
2.
Enter interface view.
3.
Set the Layer 2 portal user
detection interval.

Configuring the portal server detection function

Only Layer 3 portal authentication supports this feature.
During portal authentication, if the communication between the access device and portal server is
broken, new portal users are not able to log on and the online portal users are not able to log off normally.
To address this problem, the access device must be able to detect the reachability changes of the portal
server quickly and take corresponding actions to deal with the changes. For example, after the access
device detects that the portal server is unreachable, it allows portal users to access network resources
without authentication. This function is referred to as "portal authentication bypass." It allows for flexible
user access control.
With the portal server detection function, the device can detect the status of a specific portal server. The
specific configurations include:
1.
Detection methods (you can choose either or both)
Probing HTTP connections—The access device periodically sends TCP connection requests to
the HTTP service port of the portal servers configured on its interfaces. If the TCP connection
with a portal server can be established, the access device considers that the probe succeeds
(the HTTP service of the portal server is open and the portal server is reachable). If the TCP
connection cannot be established, the access device considers that the probe fails and the
portal server is unreachable.
Command
portal redirect-url url-string [ wait-time
period ]
Command
system-view
interface interface-type
interface-number
portal offline-detect interval
offline-detect-interval
146
Remarks
By default, an authenticated
user is redirected to the URL
the user typed in the address
bar before portal
authentication.
Remarks
N/A
N/A
300 seconds by default

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents