Portal Layer3 Source - H3C MSR Series Command Reference Manual

Comware 7 security
Hide thumbs Also See for MSR Series:
Table of Contents

Advertisement

If the device receives a reply within the maximum number of detection attempts, it considers
that the user is online and stops sending detection packets. Then the device resets the idle
timer and repeats the detection process when the timer expires.
If the device receives no reply after the maximum number of detection attempts, the device
logs out the user.
ND detection—Sends ND requests to the user and detects the ND entry status of the user at
configurable intervals.
If the ND entry of the user is refreshed within the maximum number of detection attempts,
the device considers that the user is online and stops detecting the user's ND entry. Then
the device resets the idle timer and repeats the detection process when the timer expires.
If the ND entry of the user is not refreshed after the maximum number of detection attempts,
the device logs out the user.
Direct authentication and re-DHCP authentication support both ND detection and ICMPv6 detection.
Cross-subnet authentication only supports ICMPv6 detection.
If firewall policies on the access device filter out ICMPv6 packets, ICMPv6 detection might fail and
result in the logout of portal users. Make sure the access device does not block ICMPv6 packets
before you enable ICMPv6 detection on an interface.
Examples
# Enable online detection of IPv6 portal users on GigabitEthernet 1/0/1. Configure the detection type
as ICMPv6, the maximum number of detection attempts as 5, the detection interval as 10 seconds,
and the user idle timeout as 300 seconds.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname–GigabitEthernet1/0/1] portal ipv6 user-detect type icmpv6 retry 5 interval 10
idle 300
Related commands
display portal

portal layer3 source

Use portal layer3 source to configure an IPv4 portal authentication source subnet.
Use undo portal layer3 source to delete IPv4 portal authentication source subnets.
Syntax
portal layer3 source ipv4-network-address { mask-length | mask }
undo portal layer3 source [ ipv4-network-address ]
Default
No IPv4 portal authentication source subnet is configured. Portal users from any IPv4 subnet must
pass portal authentication.
Views
Interface view
Predefined user roles
network-admin
Parameters
ipv4-network-address: Specifies an IPv4 portal authentication source subnet address.
mask-length: Specifies the subnet mask length of the IPv4 address, in the range of 0 to 32.
351

Advertisement

Table of Contents
loading

Table of Contents