Portal Auth-Network - HP 3600 v2 Series Command Reference Manual

Examples
# Configure VLAN 5 as the Auth-VLAN of portal authentication on port Ethernet 1/0/1, so that the port
will add users failing portal authentication to this VLAN.
<Sysname> system-view
[Sysname] vlan 5
[Sysname-vlan5] quit
[Sysname] interface ethernet 1/0/1
[Sysname-Ethernet1/0/1] port link-type hybrid
[Sysname-Ethernet1/0/1] mac-vlan enable
[Sysname-Ethernet1/0/1] portal auth-fail vlan 5

portal auth-network

Syntax
portal auth-network network-address { mask-length | mask }
undo portal auth-network { network-address | all }
View
VLAN interface view
Default level
2: System level
Parameters
network-address: Specifies the IP address of the authentication source subnet.
mask-length: Specifies the length of the subnet mask, in the range of 0 to 32.
mask: Specifies the subnet mask, in dotted decimal notation.
all: Specifies all authentication source subnets.
Description
Use the portal auth-network command to configure a portal authentication source subnet on an interface.
You can use this command to configure multiple portal authentication source subnets on an interface.
Then, only HTTP packets from the subnets can trigger portal authentication on the interface. If an
unauthenticated user is not on any authentication source subnet, the access device discards all the user's
packets that do not match any portal-free rule.
Use the undo portal auth-network command to remove a specified portal authentication source subnet
or all portal authentication subnets.
By default, the portal authentication source subnet is 0.0.0.0/0, meaning that users in all subnets must
pass portal authentication.
This command is only applicable for cross-subnet authentication (layer3). The portal authentication
source subnet for direct authentication (direct) can be any source IP address, and the portal
authentication source subnet for re-DHCP authentication (redhcp) is the one determined by the private IP
address of the interface connecting the users.
You can configure multiple authentication source subnets by executing the portal auth-network
command repeatedly.
148