H3C SR8800-F Configuration Manual page 15

Configuring portal authentication server detection ·································································· 320
Configuring portal Web server detection ··············································································· 321
Configuring portal user synchronization ················································································ 321
Configuring portal packet attributes ···························································································· 322
Configuring the BAS-IP or BAS-IPv6 attribute ········································································ 322
Specifying the device ID ··································································································· 323
Configuring attributes for RADIUS packets ·················································································· 324
Specifying a format for the NAS-Port-Id attribute ···································································· 324
Applying a NAS-ID profile to an interface ·············································································· 324
Configuring MAC-based quick portal authentication ······································································· 325
Restrictions and guidelines for configuring MAC-based quick portal authentication ························ 325
Configuring a MAC binding server ······················································································· 325
Specifying a MAC binding server on an interface ···································································· 326
Configuring portal HTTP attack defense ······················································································ 326
Setting the user traffic backup threshold ····················································································· 327
Logging out online portal users ································································································· 327
Enabling portal user login/logout logging ····················································································· 328
Configuring Web redirect ········································································································· 328
About Web redirect ·········································································································· 328
Restrictions and guidelines ································································································ 328
Procedure ······················································································································ 328
Display and maintenance commands for portal ············································································ 329
Portal configuration examples ··································································································· 330
Example: Configuring direct portal authentication ··································································· 330
Example: Configuring re-DHCP portal authentication ······························································ 338
Example: Configuring cross-subnet portal authentication ························································· 342
Example: Configuring extended direct portal authentication ······················································ 345
Example: Configuring extended re-DHCP portal authentication ················································· 349
Example: Configuring extended cross-subnet portal authentication ············································ 353
Example: Configuring portal server detection and portal user synchronization ······························ 356
Example: Configuring cross-subnet portal authentication for MPLS L3VPNs ································ 364
Example: Configuring direct portal authentication with a preauthentication policy ·························· 366
Example: Configuring re-DHCP portal authentication with a preauthentication policy ····················· 368
Example: Configuring direct portal authentication using a local portal Web service ························ 370
Example: Configuring MAC-based quick portal authentication ··················································· 373
Troubleshooting portal ············································································································ 381
No portal authentication page is pushed for users ·································································· 381
Cannot log out portal users on the access device ··································································· 382
Cannot log out portal users on the RADIUS server ································································· 382
Users logged out by the access device still exist on the portal authentication server ······················ 382
Re-DHCP portal authenticated users cannot log in successfully ················································ 383
Configuring IPoE ·········································································· 384
About IPoE ··························································································································· 384
IPoE access modes ········································································································· 384
IPoE users ····················································································································· 384
IPoE session ·················································································································· 385
IPoE addressing ·············································································································· 386
IPoE authentication methods ····························································································· 386
IPoE access procedure by using bind authentication ······························································· 386
Support for MPLS L3VPN ································································································· 389
Support for ITA ··············································································································· 390
Restrictions: Hardware compatibility with IPoE ············································································· 390
Restrictions and guidelines: IPoE configuration ············································································ 390
IPoE tasks at a glance ············································································································ 390
Prerequisites for IPoE ············································································································· 391
Enabling IPoE and setting the IPoE access mode ········································································· 391
Configuring bind authentication ································································································· 391
Configuring dynamic individual users ························································································· 392
Dynamic individual user configuration tasks at a glance ··························································· 392
Enabling dynamic individual users ······················································································ 392
Configuring authentication user naming conventions for dynamic individual users ························· 393
x