Optional) Configuring The Web Authentication Policy; Optional) Setting The Port That Listens To The Portal Packets - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
portal free-rule rule-id { destination { any | ip { ip-address mask { mask-length
| ip-mask } | any } } | source { any | { interface interface-type interface-number
| ip { ip-address mask { mask-length | ip-mask } | any } | vlan vlan-id }
The free rule is configured.
When the free rule is configured for Web authentication users, user packets matching the rule
can be forwarded before the Web authentication. Therefore, users without the Web
authentication possess certain access authority.
----End

2.3.5 (Optional) Configuring the Web Authentication Policy

Context
When the RADIUS server is adopted to authenticate users, do as follows if the user authentication
information returned by the RADIUS server needs to be sent to the Web authentication server.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
web-auth-server reply-message
The device is configured to send the reply message for user authentication to the Web
authentication server.
By default, the S3700 sends the reply message for user authentication to the Web authentication
server.
----End

2.3.6 (Optional) Setting the Port that Listens to the Portal Packets

Context
Do as follows to configure the port number for the S3700 to receive portal packets when the
S3700 communicates with the Web server. The port number must be consistent with the
destination port number contained in the packets sent by the Web authentication server and is
globally unique.
Issue 01 (2011-07-15) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 NAC Configuration
* *
} }
53