Configuring An Authentication Destination Subnet - HPE FlexNetwork 5510 HI Series Security Configuration Manual

In re-DHCP mode, the access device regards the authentication source subnet on an

interface as the subnet to which the private IP address of the interface belongs.
•
If both authentication source subnets and destination subnets are configured on an interface,
only the authentication destination subnets take effect.
•
You can configure multiple authentication source subnets. If the source subnets overlap, the
subnet with the largest address scope (with the smallest mask or prefix) takes effect.
To configure an IPv4 portal authentication source subnet:
Step
1. Enter system view.
2. Enter interface view.
3. Configure an IPv4 portal
authentication
subnet.
To configure an IPv6 portal authentication source subnet:
Step
1. Enter system view.
2. Enter interface view.
3. Configure an IPv6 portal
authentication
subnet.

Configuring an authentication destination subnet

By configuring authentication destination subnets, you specify that users trigger portal authentication
only when they accessing the specified subnets (excluding the destination IP addresses and subnets
specified in portal-free rules). Users can access other subnets without portal authentication.
If both authentication source subnets and destination subnets are configured on an interface, only
the authentication destination subnets take effect.
You can configure multiple authentication destination subnets. If the destination subnets overlap, the
subnet with the largest address scope (with the smallest mask or prefix) takes effect.
To configure an IPv4 portal authentication destination subnet:
Step
1. Enter system view.
2. Enter interface view.
3. Configure an IPv4
portal authentication
destination subnet.
Command
system-view
interface
interface-number
portal layer3
source
ipv4-network-address
{ mask-length | mask }
Command
system-view
interface
interface-number
portal ipv6
source
ipv6-network-address
prefix-length
Command
system-view
interface
interface-number
portal free-all except
ipv4-network-address { mask-length |
mask }
134
Remarks
N/A
interface-type
N/A
By
source authentication source subnet is
configured, and users from any
subnets
authentication.
Remarks
N/A
interface-type
N/A
By
layer3 source authentication source subnet is
configured, and IPv6 users from
any subnets must pass portal
authentication.
Remarks
N/A
interface-type
N/A
By default,
destination authentication destination subnet is
configured, and users accessing
any subnets must pass portal
authentication.
default, no IPv4 portal
must pass portal
default, no IPv6 portal
no IPv4 portal