Table of Contents
Advertisement
For information about DHCP relay agent configuration, see "Configuring DHCP.".
•
Make sure the IP address of the portal device added on the portal server is the public IP
address (20.20.20.1) of the router's interface connecting the host. The private IP address range
for the IP address group associated with the portal device is the private subnet 10.0.0.0/24
where the host resides. The public IP address range for the IP address group is the public
subnet 20.20.20.0/24.
•
If you have configured a preauthentication IP address pool on portal-enabled interfaces,
configure a DHCP relay address pool with the same name on the device. For the DHCP relay
address pool, specify the subnet address where the unauthenticated users reside (with the
export-router keyword specified) and the DHCP server address.
Procedure
Perform the following tasks on the router.
1.
Configure a portal preauthentication policy:
# Create a portal preauthentication policy named abc.
<Router> system-view
[Router] portal pre-auth policy abc
# Specify user attribute ACL 3010 in the portal preauthentication policy.
[Router-pre-auth-abc] user-attribute acl 3010
[Router-pre-auth-abc] quit
# In ACL 3010, configure a rule to permit access to the subnet 192.168.0.0/24.
[Router] acl advanced 3010
[Router-acl-ipv4-adv-3010] rule 1 permit ip destination 192.168.0.0 24
[Router-acl-ipv4-adv-3010] quit
# Apply portal preauthentication policy abc to GigabitEthernet 1/0/2.
[Router] interface gigabitethernet 1/0/2
[Router–GigabitEthernet1/0/2] portal apply pre-auth-policy abc
[Router–GigabitEthernet1/0/2] quit
2.
Configure DHCP relay and authorized ARP.
# Configure DHCP relay.
[Router] dhcp enable
[Router] dhcp relay client-information record
[Router] interface gigabitethernet 1/0/2
[Router–GigabitEthernet1/0/2] ip address 20.20.20.1 255.255.255.0
[Router–GigabitEthernet1/0/2] ip address 10.0.0.1 255.255.255.0 sub
[Router-GigabitEthernet1/0/2] dhcp select relay
[Router-GigabitEthernet1/0/2] dhcp relay server-address 192.168.0.112
# Enable authorized ARP.
[Router-GigabitEthernet1/0/2] arp authorized enable
[Router-GigabitEthernet1/0/2] quit
3.
Configure portal authentication:
# Configure a portal authentication server.
[Router] portal server newpt
[Router-portal-server-newpt] ip 192.168.0.111 key simple portal
[Router-portal-server-newpt] port 50100
[Router-portal-server-newpt] quit
# Configure a portal Web server.
[Router] portal web-server newpt
[Router-portal-websvr-newpt] url http://192.168.0.111:8080/portal
369
Advertisement
Table of Contents
Troubleshooting
