Download Print this page

Portal Host-Check Enable - HP FlexNetwork MSR Series Command Reference Manual

Comware 7 security
Hide thumbs Also See for FlexNetwork MSR Series:

Advertisement

portal host-check enable

Use portal host-check enable to enable validity check on wireless portal clients.
Use undo portal host-check enable to disable validity check on wireless portal clients.
Syntax
portal host-check enable
undo portal host-check enable
Default
Validity check on wireless portal clients is disabled. The device checks wireless portal client validity
according to ARP entries only.
Views
System view
Predefined user roles
network-admin
Usage guidelines
The following matrix shows the command and hardware compatibility:
Hardware
MSR954 (JH296A/JH297A/JH298A/JH299A/JH373A)
MSR958 (JH300A/JH301A)
MSR1002-4/1003-8S
MSR2003
MSR2004-24/2004-48
MSR3012/3024/3044/3064
MSR4060/4080
By default, the device checks wireless portal client validity according to ARP entries only. In wireless
networks where the AP forwards client traffic, the AC does not have ARP entries for clients.
Therefore, the AC cannot check the validity of portal clients by using ARP entries. To ensure that
valid users can perform portal authentication, you must enable wireless client validity check on the
AC.
This feature enables the AC to validate a client by looking up the client information in the WLAN
snooping table, DHCP snooping table, and ARP table. If the client information exists, the AC
determines the client to be valid for portal authentication.
To view information about WLAN or DHCP snooping entries, execute the display ip source binding
command.
Examples
# Enable validity check on wireless portal clients.
<Sysname> system-view
[Sysname] portal host-check enable
Related commands
display ip source binding
Command compatibility
Yes
No
Yes
Yes
Yes
Yes
No
283

Advertisement

loading