H3C S5120-HI Security Configuration Manual page 10

802.1X with ACL assignment configuration example ····························································································· 100
Network requirements ········································································································································· 100
Configuration procedure ···································································································································· 100
Verifying the configuration ································································································································· 101
Configuring EAD fast deployment ························································································································· 102
Overview ······································································································································································· 102
Free IP ··································································································································································· 102
URL redirection ····················································································································································· 102
Configuration prerequisites ········································································································································· 102
Configuring a free IP ··················································································································································· 102
Configuring the redirect URL ······································································································································· 103
Setting the EAD rule timer ··········································································································································· 103
Displaying and maintaining EAD fast deployment ··································································································· 104
EAD fast deployment configuration example ············································································································ 104
Network requirements ········································································································································· 104
Configuration procedure ···································································································································· 105
Verifying the configuration ································································································································· 105
Troubleshooting EAD fast deployment ······················································································································· 106
Web browser users cannot be correctly redirected ························································································ 106
Configuring MAC authentication ··························································································································· 107
Overview ······································································································································································· 107
User account policies ·········································································································································· 107
Authentication approaches ································································································································ 107
MAC authentication timers ································································································································· 108
Using MAC authentication with other features ········································································································· 108
VLAN assignment ················································································································································ 108
ACL assignment ··················································································································································· 108
Guest VLAN ························································································································································· 108
Critical VLAN ······················································································································································· 109
Configuration task list ·················································································································································· 109
Basic configuration for MAC authentication ············································································································· 109
Configuring MAC authentication globally ········································································································ 110
Configuring MAC authentication on a port ····································································································· 110
Specifying a MAC authentication domain ················································································································ 111
Configuring a MAC authentication guest VLAN ······································································································ 111
Configuring a MAC authentication critical VLAN ···································································································· 112
Configuring MAC authentication delay ····················································································································· 113
Enabling MAC authentication multi-VLAN mode ······································································································ 113
Displaying and maintaining MAC authentication ···································································································· 114
MAC authentication configuration examples ············································································································ 114
Local MAC authentication configuration example··························································································· 114
RADIUS-based MAC authentication configuration example··········································································· 116
ACL assignment configuration example············································································································ 118
Configuring portal authentication ·························································································································· 121
Overview ······································································································································································· 121
Extended portal functions ··································································································································· 121
Portal system components ··································································································································· 121
Portal system using the local portal server ········································································································ 123
Portal authentication modes ······························································································································· 124
Layer 2 portal authentication process ··············································································································· 124
Portal configuration task list ········································································································································ 125
Configuration prerequisites ········································································································································· 126
Specifying the portal server ········································································································································ 127
iii