Specifying A Source Ip Address For Outgoing Portal Packets (Available Only On The S5500-Ei Series); Configuring Portal Stateful Failover (Available Only On The S5500-Ei Series) - H3C S5500-EI Series Security Configuration Manual

Specifying a source IP address for outgoing portal
packets (available only on the S5500-EI series)
After you specify a source IP address for outgoing portal packets on an interface, the IP address is used
as the source IP address of packets that the access device sends to the portal server, and the destination
IP address of packets that the portal server sends to the access device.
To specify a source IP address for outgoing portal packets to be sent:
Step
1. Enter system view.
Enter interface view.
2.
3. Specify a source IP address
for outgoing portal packets.
Configuring portal stateful failover (available only
on the S5500-EI series)
Only Layer 3 portal authentication supports this feature.
To implement stateful failover for portal, configure VRRP for traffic switchover, and perform the following
configurations for service backup on each of the two devices that back up each other:
Specify an interface for backing up portal services, which is called portal service backup interface
•
in this document, and enable portal on the portal service backup interface.
Specify the portal group to which the portal service backup interface belongs. Be sure to specify the
•
same portal group for the portal service backup interfaces that back up each other on the two
devices.
• Specify the device ID. Make sure that the device ID of the local device is different from that of the
peer device.
Specify the backup source IP address for RADIUS packets to be sent as the source IP address for
•
RADIUS packets that is configured on the peer device, so that the peer device can receive packets
from the server. (This configuration is optional.)
Specify the backup VLAN, and enable stateful failover. For related configuration, see High
•
Availability Configuration Guide.
Command
system-view
interface interface-type
interface-number
portal nas-ip { ipv4-address | ipv6
ipv6-address }
158
Remarks
N/A
N/A
Optional.
By default, no source IP address is
specified for outgoing portal
packets and the IP address of the
user logon interface is used as the
source IP address of the outgoing
portal packets.
In NAT environments, H3C
recommends specifying the
interface's public IP address as the
source IP address of outgoing
portal packets.