Table of Contents
Advertisement
Restrictions and guidelines for enabling re-DHCP portal authentication
When you configure re-DHCP portal authentication (re-dhcp) on an interface, follow these
restrictions and guidelines:
•
Make sure the interface has a valid IP address before you enable re-DHCP portal
authentication on the interface. For re-DHCP portal authentication to take effect after the IP
address of the interface changes, you must disable portal authentication and then enable
re-DHCP portal authentication.
•
With re-DHCP portal authentication, configure authorized ARP on the interface as a best
practice to make sure only valid users can access the network. With authorized ARP configured
on the interface, the interface learns ARP entries only from the users who have obtained a
public address from DHCP.
•
For successful re-DHCP portal authentication, make sure the BAS-IP/BAS-IPv6 attribute value
is the same as the device IP or IPv6 address specified on the portal authentication server. To
configure the BAS-IP/BAS-IPv6 attribute, use the portal { bas-ip | bas-ipv6 } command.
•
An IPv6 portal server does not support re-DHCP portal authentication.
Procedure
To enable portal authentication on an interface:
Step
1.
Enter system view.
2.
Enter interface view.
3.
Enable portal authentication.
Specifying a portal Web server on an interface
With a portal Web server specified on an interface, the device redirects the HTTP requests of portal
users on the interface to the portal Web server.
You can specify both an IPv4 portal Web server and an IPv6 portal Web server on an interface.
To specify a portal Web server on an interface:
Step
1.
Enter system view.
Command
system-view
interface interface-type
interface-number
•
To enable IPv4 portal
authentication:
portal enable method
{ direct | layer3 | redhcp }
•
To enable IPv6 portal
authentication:
portal ipv6 enable method
{ direct | layer3 }
Command
system-view
311
Remarks
N/A
The following types of interfaces
are supported:
•
Layer 3 Ethernet interface.
•
Layer 3 Ethernet
subinterface.
•
VLAN interface.
•
Layer 3 aggregate interface.
•
Layer 3 aggregate
subinterface.
Enable IPv4 portal
authentication, IPv6 portal
authentication, or both on the
interface.
By default, portal authentication
is disabled.
Remarks
N/A
Advertisement
Table of Contents
Troubleshooting
