Configuring Extended Re-Dhcp Portal Authentication - HPE FlexNetwork 5510 HI Series Security Configuration Manual

Layer3 source network:
IP address
Destination authenticate subnet:
IP address
IPv6:
Portal status: Disabled
Authentication type: Disabled
Portal Web server: Not configured
Authentication domain: Not configured
Bas-ipv6: Not configured
User detection: Not configured
Action for server detection:
Server type
--
Layer3 source network:
IP address
Destination authenticate subnet:
IP address
Before a user performs portal authentication by using the HPE iNode client, the user can access only
the authentication page http://192.168.0.111:8080/portal. All Web requests the user initiates will be
redirected to the authentication page.
•
If the user passes the authentication but fails the security check, the user can access only the
resources that match ACL 3000.
•
After passing both the authentication and the security check, the user can access Internet
resources that match ACL 3001.
# After the user passes authentication, use the following command to display information about the
portal user.
[Switch] display portal user interface vlan-interface 100
Total portal users: 1
Username: abc
Portal server: newpt
State: Online
Authorization ACL: 3001
VPN instance: --
MAC
0015-e9a6-7cfe

Configuring extended re-DHCP portal authentication

Network requirements
As shown in
obtains an IP address through the DHCP server. A portal server acts as both a portal authentication
server and a portal Web server. A RADIUS server acts as the authentication/accounting server.
Configure extended re-DHCP portal authentication. Before passing portal authentication, the host is
assigned a private IP address. After passing portal identity authentication, the host obtains a public
IP address and accepts security check. If the host fails the security check, it can access only subnet
192.168.0.0/24. After passing the security check, the host can access Internet resources.
Server name
--
IP
2.2.2.2
Figure 56, the host is directly connected to the switch (the access device). The host
Mask
Mask
VLAN Interface
100 Vlan-interface100
162
Action
--
Prefix length
Prefix length