Table of Contents
Advertisement
name of the policy must be https_redirect. For more information about SSL server policy
configuration, see SSL configuration in Security Configuration Guide.
Procedure
To configure the parameters for a local portal Web service:
Step
1.
Enter system view.
2.
Create an HTTP- or
HTTPS-based local portal
Web service and enter its
view.
3.
Specify the default
authentication page file for
the local portal Web service.
4.
(Optional.) Configure the
listening TCP port for the
local portal Web service.
Specifying a portal authentication domain
About portal authentication domains
An authentication domain defines a set of authentication, authorization, and accounting policies.
Each portal user belongs to an authentication domain and is authenticated, authorized, and
accounted in the domain.
With an authentication domain specified on an interface, the device uses the authentication domain
for AAA of portal users. This allows for flexible portal access control.
Restrictions and guidelines for specifying a portal
authentication domain
The device chooses an authentication domain for each user in the following order:
1.
The authentication domain specified for portal users.
2.
The ISP domain in the username.
3.
The default ISP domain of the device.
If the chosen domain does not exist on the device, the device searches for the ISP domain that
accommodates users assigned to nonexistent domains. If no such ISP domain is configured, user
authentication fails. For more information about ISP domains, see
Command
system-view
portal local-web-server { http |
https ssl-server-policy
policy-name }
default-logon-page filename
tcp-port port-number
307
Remarks
N/A
By default, no local portal Web
service exists.
By default, no default
authentication page file is
specified for the local portal Web
service.
To provide local portal Web
service for users, you must use
this command to specify a
customized authentication page
file as the default authentication
page file.
By default, the HTTP service
listening port number is 80 and the
HTTPS service listening port
number is 443.
"Configuring
AAA."
Advertisement
Table of Contents
Troubleshooting
