HPE FlexNetwork MSR Series Configuration Manual page 6

Configuring portal user synchronization ················································································· 163
Configuring the portal fail-permit feature ······················································································· 163
Configuring BAS-IP for portal packets sent to the portal authentication server ····································· 164
Specifying a format for the NAS-Port-ID attribute ··········································································· 165
Specifying the device ID ············································································································ 166
Enabling portal roaming ············································································································ 166
Logging out online portal users ··································································································· 166
Disabling traffic accounting for portal users ··················································································· 167
Configuring Web redirect ··········································································································· 167
Applying a NAS-ID profile to an interface ······················································································ 168
Configuring the local portal Web server feature ·············································································· 169
Customizing authentication pages ························································································ 169
Configuring a local portal Web server ···················································································· 171
Enabling validity check on wireless clients·············································································· 172
Automatically logging out wireless portal users ······································································· 173
Enabling ARP or ND entry conversion for portal clients ····························································· 173
Configuring HTTPS redirect ······································································································· 174
Configuring MAC-based quick portal authentication ········································································ 174
Configuring a remote MAC binding server ·············································································· 174
Configuring a local MAC binding server ················································································· 175
Specifying a MAC binding server on an interface ····································································· 176
Specifying a MAC binding server on a service template ···························································· 176
Configuring NAS-Port-Type ········································································································ 176
Configuring portal safe-redirect ··································································································· 177
Setting the interval at which an AP reports traffic statistics to the AC ·················································· 179
Excluding an attribute from portal protocol packets ········································································· 179
Enabling portal logging ·············································································································· 179
Configuring portal support for third-party authentication ··································································· 180
Editing buttons and pages for third-party authentication ···························································· 180
Configuring a third-party authentication server ········································································ 181
Specifying an authentication domain for third-party authentication ·············································· 182
Configuring portal temporary pass ······························································································· 182
Displaying and maintaining portal ································································································ 183
Portal configuration examples (wired application) ··········································································· 185
Configuring direct portal authentication ·················································································· 185
Configuring re-DHCP portal authentication ············································································· 194
Configuring cross-subnet portal authentication ········································································ 198
Configuring extended direct portal authentication ···································································· 201
Configuring extended re-DHCP portal authentication ······························································· 204
Configuring extended cross-subnet portal authentication ·························································· 208
Configuring portal server detection and portal user synchronization ············································ 212
Configuring cross-subnet portal authentication for MPLS L3VPNs ·············································· 221
Configuring direct portal authentication with a preauthentication domain ······································ 223
Configuring re-DHCP portal authentication with a preauthentication domain ································· 225
Configuring direct portal authentication using the local portal Web server ····································· 228
Portal configuration examples (wireless application) ······································································· 231
Configuring direct portal authentication ·················································································· 231
Verifying the configuration ··································································································· 239
Configuring MAC-based quick portal authentication ································································· 240
Troubleshooting portal ·············································································································· 248
No portal authentication page is pushed for users ···································································· 248
Cannot log out portal users on the access device ···································································· 248
Cannot log out portal users on the RADIUS server ·································································· 249
Users logged out by the access device still exist on the portal authentication server ······················· 249
Re-DHCP portal authenticated users cannot log in successfully ················································· 249
Configuring port security ································································ 251
Overview ································································································································ 251
Port security features ········································································································· 251
Port security modes ··········································································································· 252
Feature and hardware compatibility ····························································································· 254
Configuration task list················································································································ 254
iv