H3C S5500-EI Series Security Configuration Manual page 11

Network requirements ········································································································································· 109
Configuration procedure ···································································································································· 110
Verifying the configuration ································································································································· 111
802.1X with ACL assignment configuration example ····························································································· 111
Network requirements ········································································································································· 111
Configuration procedure ···································································································································· 112
Verifying the configuration ································································································································· 112
Configuring EAD fast deployment ························································································································· 114
Overview ······································································································································································· 114
Free IP ··································································································································································· 114
URL redirection ····················································································································································· 114
Configuration prerequisites ········································································································································· 114
Configuring a free IP ··················································································································································· 114
Configuring the redirect URL ······································································································································· 115
Setting the EAD rule timer ··········································································································································· 115
Displaying and maintaining EAD fast deployment ··································································································· 115
EAD fast deployment configuration example ············································································································ 116
Network requirements ········································································································································· 116
Configuration procedure ···································································································································· 117
Verifying the configuration ································································································································· 117
Troubleshooting EAD fast deployment ······················································································································· 118
Web browser users cannot be correctly redirected ························································································ 118
Configuring MAC authentication ··························································································································· 119
Overview ······································································································································································· 119
User account policies ·········································································································································· 119
Authentication approaches ································································································································ 119
MAC authentication timers ································································································································· 120
Using MAC authentication with other features ········································································································· 120
VLAN assignment ················································································································································ 120
ACL assignment ··················································································································································· 120
Guest VLAN ························································································································································· 120
Critical VLAN ······················································································································································· 121
Configuration task list ·················································································································································· 121
Basic configuration for MAC authentication ············································································································· 121
Configuring MAC authentication globally ········································································································ 122
Configuring MAC authentication on a port ····································································································· 122
Specifying a MAC authentication domain ················································································································ 123
Configuring a MAC authentication guest VLAN ······································································································ 123
Configuring a MAC authentication critical VLAN ···································································································· 124
Configuring MAC authentication delay ····················································································································· 125
Displaying and maintaining MAC authentication ···································································································· 125
MAC authentication configuration examples ············································································································ 126
Local MAC authentication configuration example··························································································· 126
RADIUS-based MAC authentication configuration example··········································································· 127
ACL assignment configuration example············································································································ 129
Configuring portal authentication ·························································································································· 132
Overview ······································································································································································· 132
Extended portal functions ··································································································································· 132
Portal system components ··································································································································· 132
Portal system using the local portal server ········································································································ 134
Portal authentication modes ······························································································································· 135
Portal support for EAP (available only on the S5500-EI series) ····································································· 136
Layer 2 portal authentication process ··············································································································· 137
iii