Portal Outbound-Filter Enable; Portal Pre-Auth Domain - H3C MSR Series Command Reference Manual

Related commands
display portal interface

portal outbound-filter enable

Use portal [ ipv6 ] outbound-filter enable to enable outgoing packets filtering on a portal-enabled
interface.
Use undo portal [ ipv6 ] outbound-filter enable to disable outgoing packets filtering on a
portal-enabled interface.
Syntax
portal [ ipv6 ] outbound-filter enable
undo portal [ ipv6 ] outbound-filter enable
Default
Outgoing packets filtering is disabled. A portal-enabled interface can send any packets.
Views
Interface view
Predefined user roles
network-admin
Parameters
ipv6: Specifies outgoing IPv6 packets. If you do not specify this keyword, the command is for
outgoing IPv4 packets.
Usage guidelines
When you enable this feature on a portal-enabled interface, the device permits the interface to send
the following packets:
•
Packets whose destination IP addresses are IP addresses of authenticated portal users.
•
Packets that match portal-free rules.
Other outgoing packets on the interface are dropped.
Examples
# Enable outgoing packets filtering on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] portal outbound-filter enable

portal pre-auth domain

Use portal [ ipv6 ] pre-auth domain to specify a preauthentication domain for portal users.
Use undo portal [ ipv6 ] pre-auth domain to restore the default.
Syntax
portal [ ipv6 ] pre-auth domain domain-name
undo portal [ ipv6 ] pre-auth domain
Default
No preauthentication domain is specified for portal users.
363