H3C MSR Series Command Reference Manual page 329

Comware 7 security
Hide thumbs Also See for MSR Series:
Table of Contents

Advertisement

Usage guidelines
The following matrix shows the command and hardware compatibility:
Hardware
MSR810/810-W/810-W-DB/810-LM/810-W-LM/810-10-PoE/
810-LM-HK/810-W-LM-HK/810-LMS/810-LUS
MSR2600-10-X1
MSR 2630
MSR3600-28/3600-51
MSR3600-28-SI/3600-51-SI
MSR3610-X1/3610-X1-DP/3610-X1-DC/3610-X1-DP-DC
MSR 3610/3620/3620-DP/3640/3660
MSR5620/5660/5680
A match rule for temporary pass matches Web requests by URL or User-Agent information. Only the
matching Web requests are temporarily permitted to pass.
A permitted request can be redirected to the specified redirection URL or to the originally requested
URL, depending on the redirection action in the match rule. If you do not configure a redirection
action (by using the redirect-url url-string option or the original keyword), the device permits the
matching requests to pass without redirection.
For the match rules to take effect, make sure the portal temporary pass feature is enabled.
If you configure the same match criteria but different redirection actions in two match rules, the new
configuration overwrites the existing one.
Examples
# Configure a temporary pass rule to temporarily allow user packets that access the URL
http://www.abc.com.cn
<Sysname> system-view
[Sysname] portal web-server wbs
[Sysname-portal-websvr-wbs] if-match original-url http://www.abc.com.cn temp-pass
# Configure a temporary pass rule to temporarily allow user packets that access the URL
http://www.abc.com.cn
<Sysname> system-view
[Sysname] portal web-server wbs
[Sysname-portal-websvr-wbs] if-match original-url http://www.abc.com.cn temp-pass
original
# Configure a temporary pass rule to allow user packets that contain user agent information
5.0(WindowsNT6.1)AppleWebKit/537.36(KHTML,likeGecko)Chrome/36.0.1985.125Safari/537.
36 to pass and then redirect the packets to the URL http://192.168.0.1.
<Sysname> system-view
[Sysname] portal web-server wbs
[Sysname-portal-websvr-wbs] if-match user-agent
5.0(WindowsNT6.1)AppleWebKit/537.36(KHTML,likeGecko)Chrome/36.0.1985.125Safari/537.36
temp-pass redirect-url http://192.168.0.1
# Configure a temporary pass rule. This rule allows user packets that access the URL
http://www.abc.com.cn
5.0(WindowsNT6.1)AppleWebKit/537.36(KHTML,likeGecko)Chrome/36.0.1985.125Safari/537.
36 to pass and then redirects the packets to the URL http://192.168.0.1.
to pass.
to pass and then redirect the packets to the originally requested URL.
and
contain
306
Command compatibility
No
Yes
Yes
Yes
Yes
Yes
Yes
Yes
user
agent
information

Advertisement

Table of Contents
loading

Table of Contents