Portal Pre-Auth Ip-Pool - HP FlexNetwork 7500 Series Command Reference Manual

•
You create the ISP domain after specifying it as the preauthentication domain.
•
You delete the specified ISP domain and then re-create it.
If you change the preauthentication domain on an interface, the interface uses the new
preauthentication domain for both new and existing preauthentication users.
If authorization attributes in the preauthentication domain are modified, the modified attributes take
effect only on new preauthentication users. Existing preauthentication users use the original
authorization attributes.
If the ACL in the preauthentication domain does not exist or the ACL has no rules, the device does
not control user access. Users can access any network resources without passing portal
authentication.
Follow these guidelines when you configure a preauthentication ACL rule:
•
Do not specify a source address. If you specify a source address, users cannot trigger portal
authentication.
•
Do not set the destination address to any. If you set the destination address to any, all packets
will be permitted to pass and therefore users can access any resources before portal
authentication.
Examples
# Create preauthentication domain abc for VLAN-interface 1.
<Sysname> system-view
[Sysname] interface vlan-interface 1
[Sysname-Vlan-interface1] portal pre-auth domain abc
Related commands
display portal

portal pre-auth ip-pool

Use portal [ ipv6 ] pre-auth ip-pool to specify a preauthentication IP address pool for portal users.
Use undo portal [ ipv6 ] pre-auth ip-pool to restore the default.
Syntax
portal [ ipv6 ] pre-auth ip-pool pool-name
undo portal [ ipv6 ] pre-auth ip-pool
Default
No preauthentication IP address pool is specified for portal users.
Views
Interface view
Predefined user roles
network-admin
mdc-admin
Parameters
ipv6: Specifies IPv6 portal users. Do not specify this keyword for IPv4 portal users.
pool-name: Specifies an IP address pool by its name, a case-insensitive string of 1 to 63 characters.
290