Controlling Portal User Access; Configuring A Portal-Free Rule - H3C SR8800-F Configuration Manual

Step
2. Enter interface view.
3. Specify a portal Web
server on the
interface.

Controlling portal user access

Configuring a portal-free rule

About portal-free rules
A portal-free rule allows specified users to access specified external websites without portal
authentication.
The matching items for a portal-free rule include the host name, source/destination IP address,
TCP/UDP port number, source MAC address, access interface, and VLAN. Packets matching a
portal-free rule will not trigger portal authentication, so users sending the packets can directly access
the specified external websites.
Restrictions and guidelines for configuring a portal-free rule
When you configure a portal-free rule, follow these restrictions and guidelines:
•
If you specify both a VLAN and an interface, the interface must belong to the VLAN. If the
interface does not belong to the VLAN, the portal-free rule does not take effect.
•
You cannot configure two or more portal-free rules with the same filtering criteria. Otherwise,
the system prompts that the rule already exists.
•
Regardless of whether portal authentication is enabled or not, you can only add or remove a
portal-free rule. You cannot modify it.
When you configure an IP-based portal-free rule, follow these restrictions and guidelines:
•
If a portal-enabled interface is enabled with the static individual users feature of IPoE, you must
specify the source IP address in the portal-free rule. Make sure the specified source IP address
is not the same as any of the trusted source IP addresses for unclassified-IP users. The trusted
source IP addresses for unclassified-IP users are configured by using the ip subscriber
unclassified-ip ip match or ipv6 subscriber unclassified-ip ip match command.
For more information about the static individual users feature, see
information about the ip subscriber unclassified-ip ip match and ipv6 subscriber
unclassified-ip ip match commands, see IPoE commands in User Access Command
Reference.
Command
interface interface-type interface-number
•
To specify an IPv4 portal Web
server:
portal apply web-server
server-name [ fail-permit ]
•
To specify an IPv6 portal Web
server:
portal ipv6 apply web-server
server-name [ fail-permit ]
312
Remarks
The following types of interfaces
are supported:
•
Layer 3 Ethernet interface.
•
Layer 3 Ethernet
subinterface.
•
VLAN interface.
•
Layer 3 aggregate interface.
•
Layer 3 aggregate
subinterface.
Specify an IPv4 portal Web server,
an IPv6 portal Web server, or both.
By default, no portal Web servers
are specified on an interface.
"Configuring IPoE." For more