Configuring The Local Portal Server; Enabling Portal Authentication; Enabling Layer 2 Portal Authentication - H3C S5500-EI Series Security Configuration Manual

If a user refreshes the logon success or online page, or jumps to another website from either of the pages,
the device also logs off the user.
Only Microsoft IE, Mozilla Firefox, and Apple Safari browsers support the device to log off the user when
the user closes the logon success or online page. Google Chrome, Opera, and other browsers do not
support this function.

Configuring the local portal server

To make the local portal server take effect, specify the protocol to be used for communication between
the portal client and local portal server.
Configuration prerequisites
To configure the local portal server to support HTTPS, complete these configurations at first:
• Configure PKI policies, obtain the CA certificate, and apply for a local certificate. For more
information, see
Configure the SSL server policy, and specify the PKI domain to be used, which is configured in the
•
above step. For more information, see
When you specify the protocol for the local portal server to support, the local portal server will load the
default authentication page file, which is supposed to be saved in the root directory of the device.
Therefore, to make sure that the local portal server uses the user-defined default authentication pages,
you must edit and save them properly. Otherwise, the system default authentication pages are used.
Configuration procedure
To configure the local portal server:
Step
1. Enter system view.
2. Configure the protocol type
for the local portal server to
support and load the default
authentication page file.
3. Configure the welcome
banner of the default
authentication pages of the
local portal server.

Enabling portal authentication

Only after you enable portal authentication on an access interface, can the access interface perform
portal authentication for connected clients.

Enabling Layer 2 portal authentication

Before enabling Layer 2 portal authentication, make sure that:
The listening IP address of the local portal server is specified.
•
• Layer 3 portal authentication is not enabled on any interface.
Follow these guidelines when you enable Layer 2 portal authentication:
"Configuring PKI."
"Configuring
Command
system-view
portal local-server { http | https
server-policy policy-name }
portal server banner banner-string
SSL."
150
Remarks
N/A
By default, the local portal server
does not support any protocol.
Optional.
No welcome banner by default.