H3C SR8800-F Configuration Manual page 317

Tasks at a glance
(Optional.) Configuring a local portal Web service
(Optional.) Specifying a portal authentication domain
(Optional.) Configuring a portal preauthentication policy
(Optional.) Specifying a preauthentication IP address pool
(Required.) Enabling portal authentication on an interface
(Required.) Specifying a portal Web server on an interface
(Optional.) Controlling portal user access
•
Configuring a portal-free rule
•
Configuring an authentication source subnet
•
Setting the maximum number of portal users
•
Enabling strict-checking on portal authorization information
•
Allowing only users with DHCP-assigned IP addresses to pass
portal authentication
•
Configuring support of Web proxy for portal authentication
•
Blocking portal users that fail portal authentication
•
Enabling portal roaming
•
Configuring the portal fail-permit feature
(Optional.) Configuring portal detection features
•
Configuring online detection of portal users
•
Configuring portal authentication server detection
•
Configuring portal Web server detection
•
Configuring portal user synchronization
(Optional.) Configuring portal packet attributes
•
Configuring the BAS-IP or BAS-IPv6 attribute
•
Specifying the device ID
(Optional.) Configuring attributes for RADIUS packets
•
Specifying a format for the NAS-Port-Id attribute
•
Applying a NAS-ID profile to an interface
(Optional.) Configuring MAC-based quick portal authentication
(Optional.) Configuring portal HTTP attack defense
(Optional.) Setting the user traffic backup threshold
(Optional.) Logging out online portal users
(Optional.) Enabling portal user login/logout logging
(Optional.) Configuring Web redirect
301
Remarks
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
On Etherchannel interfaces, both
Web redirect and portal
authentication can be enabled at the
same time.
On non-Ethernetchannel interfaces,
Web redirect does not work when
both Web redirect and portal
authentication are enabled.