Portal stateful failover ·········································································································································· 127

Portal authentication across VPNs ····················································································································· 129

Portal configuration task list ········································································································································ 129

Configuration prerequisites ········································································································································· 130

Specifying the portal server ········································································································································ 131

Specifying the local portal server for Layer 2 portal authentication ······························································ 131

Specifying a portal server for Layer 3 portal authentication ·········································································· 132

Configuring the local portal server ···························································································································· 132

Customizing authentication pages ···················································································································· 132

Configuring the local portal server ···················································································································· 135

Enabling portal authentication ···································································································································· 136

Enabling Layer 2 portal authentication ············································································································· 136

Enabling Layer 3 portal authentication ············································································································· 136

Controlling access of portal users ······························································································································ 137

Configuring a portal-free rule····························································································································· 137

Configuring an authentication source subnet ··································································································· 138

Setting the maximum number of online portal users ························································································ 139

Specifying an authentication domain for portal users ····················································································· 139

Configuring Layer 2 portal authentication to support Web proxy ································································· 140

Enabling support for portal user moving ·········································································································· 140

Specifying an Auth-Fail VLAN for portal authentication ·························································································· 141

Configuring RADIUS related attributes ······················································································································ 142

Specifying NAS-Port-Type for an interface ······································································································· 142

Specifying a NAS ID profile for an interface ··································································································· 142

Specifying a source IP address for outgoing portal packets ··················································································· 143

Configuring portal stateful failover ····························································································································· 143

Specifying an auto redirection URL for authenticated portal users ········································································· 145

Configuring portal detection functions ······················································································································· 146

Configuring online Layer 2 portal user detection ···························································································· 146

Configuring the portal server detection function ······························································································ 146

Configuring portal user information synchronization ······················································································ 148

Logging off portal users ··············································································································································· 148

Displaying and maintaining portal ···························································································································· 149

Portal configuration examples ···································································································································· 150

Configuring direct portal authentication ··········································································································· 150

Configuring re-DHCP portal authentication ······································································································ 154

Configuring cross-subnet portal authentication ································································································ 156

Configuring direct portal authentication with extended functions·································································· 158

Configuring re-DHCP portal authentication with extended functions ···························································· 160

Configuring cross-subnet portal authentication with extended functions ······················································· 162

Configuring portal stateful failover ···················································································································· 164

Configuring portal server detection and portal user information synchronization ······································· 172

Cross-subnet portal authentication across VPNs ······························································································ 177

Configuring Layer 2 portal authentication ········································································································ 179

Troubleshooting portal ················································································································································· 183

Inconsistent keys on the access device and the portal server ········································································· 183

Incorrect server port number on the access device ·························································································· 183

Configuring triple authentication ··························································································································· 185

Overview ······································································································································································· 185

Triple authentication mechanism ······················································································································· 185

Using triple authentication with other features ································································································· 186

Triple authentication configuration examples ··········································································································· 187

Triple authentication basic function configuration example ··········································································· 187