HPE FlexNetwork MSR Series Configuration Manual page 5

Authentication methods ······································································································ 122
VLAN assignment·············································································································· 123
ACL assignment ················································································································ 123
Periodic MAC reauthentication ····························································································· 124
Compatibility information ··········································································································· 124
Feature and hardware compatibility ······················································································ 124
Command and hardware compatibility ··················································································· 124
Configuration prerequisites ········································································································ 125
Configuration task list················································································································ 125
Enabling MAC authentication ····································································································· 125
Specifying a MAC authentication domain ······················································································ 126
Configuring the user account format ···························································································· 126
Configuring MAC authentication timers························································································· 127
Setting the maximum number of concurrent MAC authentication users on a port ·································· 127
Configuring MAC authentication delay·························································································· 128
Enabling MAC authentication multi-VLAN mode on a port ································································ 128
Configuring the keep-online feature ····························································································· 129
Including user IP addresses in MAC authentication requests ···························································· 129
Displaying and maintaining MAC authentication ············································································· 130
MAC authentication configuration examples ·················································································· 130
Local MAC authentication configuration example ····································································· 130
RADIUS-based MAC authentication configuration example ······················································· 132
ACL assignment configuration example ················································································· 134
Configuring portal authentication ····················································· 137
Overview ································································································································ 137
Extended portal functions ···································································································· 137
Portal system components ·································································································· 137
Portal system using the local portal Web server ······································································ 139
Interaction between portal system components ······································································· 139
Portal authentication modes ································································································ 140
Portal support for EAP ········································································································ 141
Portal authentication process ······························································································· 141
Portal packet filtering rules ·································································································· 143
BYOD support ·················································································································· 144
MAC-based quick portal authentication ·················································································· 144
Compatibility information ··········································································································· 145
Feature and hardware compatibility ······················································································ 145
Command and hardware compatibility ··················································································· 145
Portal configuration task list ······································································································· 146
Configuration prerequisites ········································································································ 147
Configuring a portal authentication server ····················································································· 147
Configuring a portal Web server ·································································································· 148
Enabling portal authentication····································································································· 149
Configuration restrictions and guidelines ················································································ 150
Configuration procedure ····································································································· 150
Specifying a portal Web server ··································································································· 151
Controlling portal user access····································································································· 152
Configuring a portal-free rule ······························································································· 152
Configuring an authentication source subnet ·········································································· 153
Configuring an authentication destination subnet ····································································· 154
Setting the maximum number of portal users ·········································································· 154
Specifying a portal authentication domain ·············································································· 155
Specifying a preauthentication domain ·················································································· 156
Specifying a preauthentication IP address pool for portal users ·················································· 157
Enabling strict-checking on portal authorization information ······················································· 158
Enabling portal authentication only for DHCP users ································································· 159
Enabling outgoing packets filtering on a portal-enabled interface ················································ 159
Configuring portal detection features ···························································································· 160
Configuring online detection of portal users ············································································ 160
Configuring portal authentication server detection ···································································· 161
Configuring portal Web server detection ················································································ 162
iii