Example: Configuring Cross-Subnet Portal Authentication - H3C SR8800-F Configuration Manual

[Router] display portal user interface gigabitethernet 1/0/2
Total portal users: 1
Username: abc
Portal server: newpt
State: Online
VPN instance: N/A
MAC
0015-e9a6-7cfe
Authorization information:
DHCP IP pool: N/A
User profile: N/A
Session group profile: N/A
ACL: N/A
Inbound CAR: N/A
Outbound CAR: N/A
Inbound priority: N/A
Outbound priority: N/A

Example: Configuring cross-subnet portal authentication

Network configuration
As shown in
through Router B. A portal server acts as both a portal authentication server and a portal Web server.
A RADIUS server acts as the authentication/accounting server.
Configure Router A for cross-subnet portal authentication. Before passing the authentication, the
host can access only the portal server. After passing the authentication, the user can access other
network resources.
Figure 111 Network diagram
Configuration prerequisites and guidelines
•
Configure IP addresses for the router and servers as shown in
host, router, and servers can reach each other.
•
Configure the RADIUS server correctly to provide authentication and accounting functions.
•
Make sure the IP address of the portal device added on the portal authentication server is the IP
address (20.20.20.1) of the router's interface connecting the host. The IP address group
associated with the portal device is the subnet of the host (8.8.8.0/24).
IP
20.20.20.2
Figure 111, Router A supports portal authentication. The host accesses Router A
VLAN Interface
-- GigabitEthernet1/0/2
342
Figure 111 and make sure the