Portal Ipv6 Free-All Except Destination - H3C MSR Series Command Reference Manual

Comware 7 security
Hide thumbs Also See for MSR Series:
Table of Contents

Advertisement

Hardware
MSR3600-28-SI/3600-51-SI
MSR3610-X1/3610-X1-DP/3610-X1-DC/3610-X1-D
P-DC
MSR 3610/3620/3620-DP/3640/3660
MSR5620/5660/5680
By default, the device checks wireless portal client validity according to ARP entries only. In wireless
networks where the AP forwards client traffic, the AC does not have ARP entries for clients.
Therefore, the AC cannot check the validity of portal clients by using ARP entries. To ensure that
valid users can perform portal authentication, you must enable wireless client validity check on the
AC.
This feature enables the AC to validate a client by looking up the client information in the WLAN
snooping table, DHCP snooping table, and ARP table. If the client information exists, the AC
determines the client to be valid for portal authentication.
To view information about WLAN or DHCP snooping entries, execute the display ip source binding
command.
Examples
# Enable validity check on wireless portal clients.
<Sysname> system-view
[Sysname] portal host-check enable
Related commands
display ip source binding

portal ipv6 free-all except destination

Use portal ipv6 free-all except destination to configure an IPv6 portal authentication destination
subnet on an interface.
Use undo portal ipv6 free-all except destination to delete IPv6 portal authentication destination
subnets on the interface.
Syntax
portal ipv6 free-all except destination ipv6-network-address prefix-length
undo portal ipv6 free-all except destination [ ipv6-network-address ]
Default
No IPv6 portal authentication destination subnet is configured on the interface. Portal users must
pass portal authentication to access any IPv6 subnet.
Views
Interface view
Predefined user roles
network-admin
Parameters
ipv6-network-address: Specifies an IPv6 portal authentication destination subnet.
prefix-length: Specifies the prefix length of the IPv6 subnet, in the range of 0 to 128.
Command compatibility
No
No
Yes
No
348

Advertisement

Table of Contents
loading

Table of Contents