Table of Contents
Advertisement
Predefined user roles
network-admin
mdc-admin
Parameters
rule-number: Specifies a portal-free rule number. The value range for this argument is 0 to
4294967295.
destination: Specifies the destination information.
source: Specifies the source information.
ip ipv4-address: Specifies an IPv4 address for the portal-free rule.
{ mask-length | mask }: Specifies the subnet mask of the IPv4 address. The value range for the
mask-length argument is 0 to 32. The mask argument is in dotted decimal format.
ipv6 ipv6-address: Specifies an IPv6 address for the portal-free rule.
prefix-length: Specifies the prefix length of the IPv6 address, in the range of 0 to 128.
ip any: Represents any IPv4 address.
ipv6 any: Represents any IPv6 address.
tcp tcp-port-number: Specifies a TCP port number for the portal-free rule, in the range of 0 to 65535.
udp udp-port-number: Specifies a UDP port number for the portal-free rule, in the range of 0 to
65535.
all: Specifies all portal-free rules.
interface interface-type interface-number: Specifies a Layer 3 interface on which the portal-free rule
takes effect.
Usage guidelines
You can specify both the source and destination keyword for a portal-free rule. If you specify only
one keyword, the other keyword does not act as a filtering criterion.
If you specify both a source port number and a destination port number for a portal-free rule, the two
port numbers must belong to the same transport layer protocol.
If you do not specify a Layer 3 interface, the portal-free rule takes effect on all portal-enabled
interfaces.
You cannot configure two portal-free rules with the same filtering criteria.
Examples
# Configure an IPv4-based portal-free rule:
•
Set the rule number to 1.
•
Specify the source IP address as 10.10.10.1/24, the destination IP address as 20.20.20.1, and
the destination TCP port number as 23.
•
Specify the interface where the rule is applied as VLAN-interface 1.
<Sysname> system-view
[Sysname] portal free-rule 1 destination ip 20.20.20.1 32 tcp 23 source ip 10.10.10.1 24
interface vlan-interface 1
With this rule, users in subnet 10.10.10.1/24 do not need to pass portal authentication on
VLAN-interface 1 when they access services provided on TCP port 23 of host 20.20.20.1.
# Configure an IPv6-based portal-free rule:
•
Set the rule number to 2.
274
Advertisement
Table of Contents
