Portal Ipv6 Layer3 Source - H3C MSR Series Command Reference Manual

Usage guidelines
Portal users on the interface are authenticated when accessing the specified authentication
destination subnet (except IP addresses and subnets specified in portal-free rules). The users can
access other subnets without portal authentication.
You can configure multiple authentication destination subnets.
If you do not specify the ipv6-network-address argument in the undo portal ipv6 free-all except
destination command, this command deletes all IPv6 portal authentication destination subnets on
the interface.
Re-DHCP authentication does not support authentication destination subnets.
If you configure both an authentication source subnet and an authentication destination subnet on an
interface, only the authentication destination subnet takes effect.
Examples
# Configure an IPv6 portal authentication destination subnet of 1::2/16 on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname–GigabitEthernet1/0/1] portal ipv6 free-all except destination 1::2 16
Related commands
display portal

portal ipv6 layer3 source

Use portal ipv6 layer3 source to configure an IPv6 portal authentication source subnet on an
interface.
Use undo portal ipv6 layer3 source to delete IPv6 portal authentication source subnets on an
interface.
Syntax
portal ipv6 layer3 source ipv6-network-address prefix-length
undo portal ipv6 layer3 source [ ipv6-network-address ]
Default
No IPv6 portal authentication source subnet is configured on the interface. Portal users from any
IPv6 subnet must pass portal authentication.
Views
Interface view
Predefined user roles
network-admin
Parameters
ipv6-network-address: Specifies an IPv6 portal authentication source subnet address.
prefix-length: Specifies the prefix length of the IPv6 address, in the range of 0 to 128.
Usage guidelines
With IPv6 authentication source subnets configured, only packets from IPv6 users on the
authentication source subnets can trigger portal authentication. If an unauthenticated IPv6 user is
not on any authentication source subnet, the access device discards all the user's packets that do
not match any portal-free rule.
349