Table of Contents
Advertisement
Specifying a portal authentication domain on an interface
Step
1.
Enter system view.
2.
Enter interface view.
3.
Specify an portal
authentication domain on the
interface.
Configuring a portal preauthentication policy
About portal preauthentication policies
A portal preauthentication policy defines user attributes assigned to preauthentication portal users
on a portal-enabled interface after the users obtain IP addresses. Before the preauthentication users
pass portal authentication, they have limited access to the network based on the assigned user
attributes (such as ACL, user profile, and CAR). After the users pass portal authentication, they are
assigned new attributes by the AAA server. After the users go offline, they are re-assigned user
attributes in the preauthentication policy.
Restrictions and guidelines
When you configure a portal preauthentication policy, follow these restrictions and guidelines:
•
The portal preauthentication policy takes effect only on portal users with IP addresses obtained
through DHCP or DHCPv6.
•
The portal preauthentication policy does not take effect on interfaces enabled with cross-subnet
portal authentication.
•
If you modify a user attribute (or its contents) in the portal preauthentication policy, the
modification immediately takes effect on the policy-applied interface for unauthenticated portal
users.
Procedure
To configure a portal preauthentication policy:
Step
1.
Enter system view.
2.
Create a portal
preauthentication policy and
enter its view.
Command
system-view
interface interface-type
interface-number
portal [ ipv6 ] domain
domain-name
Command
system-view
portal pre-auth policy
policy-name
308
Remarks
N/A
N/A
By default, no portal
authentication domain is specified
on an interface.
You can specify both an IPv4
portal authentication domain and
an IPv6 portal authentication
domain on an interface.
Remarks
N/A
By default, no portal
preauthentication policies exist.
Advertisement
Table of Contents
Troubleshooting
