Table of Contents
Advertisement
[Sysname–Vlan-interface2] portal ipv6 free-all except destination 1::2 16
Related commands
display portal
portal ipv6 layer3 source
Use portal ipv6 layer3 source to configure an IPv6 portal authentication source subnet.
Use undo portal ipv6 layer3 source to delete IPv6 portal authentication source subnets.
Syntax
portal ipv6 layer3 source ipv6-network-address prefix-length
undo portal ipv6 layer3 source [ ipv6-network-address ]
Default
No IPv6 portal authentication source subnet is configured. Portal users from any IPv6 subnet must
pass portal authentication.
Views
Interface view
Predefined user roles
network-admin
mdc-admin
Parameters
ipv6-network-address: Specifies an IPv6 portal authentication source subnet address.
prefix-length: Specifies the prefix length of the IPv6 address, in the range of 0 to 128.
Usage guidelines
With IPv6 authentication source subnets configured, only packets from IPv6 users on the
authentication source subnets can trigger portal authentication. If an unauthenticated IPv6 user is
not on any authentication source subnet, the access device discards all the user's packets that do
not match any portal-free rule.
If you do not specify the ipv6-network-address argument in the undo portal ipv6 layer3 source
command, this command deletes all IPv6 portal authentication source subnets on the interface.
Only cross-subnet authentication supports authentication source subnets.
If you configure both an authentication source subnet and an authentication destination subnet on an
interface, only the authentication destination subnet takes effect.
Examples
# Configure an IPv6 portal authentication source subnet of 1::1/16 on VLAN-interface 2. Only portal
users from subnet 1::1/16 trigger portal authentication.
<Sysname> system-view
[Sysname] interface vlan-interface 2
[Sysname–Vlan-interface2] portal ipv6 layer3 source 1::1 16
Related commands
display portal
portal ipv6 free-all except destination
278
Advertisement
Table of Contents
