Re-Dhcp Authentication Configuration Examples - 3Com MSR 50 Series Configuration Manual

Re-DHCP Authentication
Configuration Examples
n
Network requirements
The router is configured with re-DHCP authentication. Users obtain IP
■
addresses through the DHCP server. Before portal authentication, they are
assigned private IP addresses. After passing portal authentication, they apply
public IP addresses so that they can access the Internet.
A RADIUS server serves as the authentication/accounting server.
■
Network diagram
Figure 540 Network diagram for re-DHCP authentication (on a router)
Eth1 /0
20.20.20.1/ 24
10. 0. 0. 1/ 24 sub
Host
automatically obtains
an IP address
Configuration procedure
In re-DHCP authentication mode, you must configure a public address pool (for
■
example, 20.20.20.0/24) and a private address pool (for example, 10.0.0.0/24)
on the DHCP server. For detailed configuration about DHCP, refer to
Overview" on page
In the re-DHCP authentication, the access device must be configured as a DHCP
■
relay agent (instead of a DHCP server) and the portal-enabled interface must be
configured with a primary IP address (a public IP address) and a secondary IP
address (a private IP address).
IP addresses are configured for devices as required and routes are available
■
between devices before the portal feature is enabled.
The following only describes the configurations related to the re-DHCP
■
authentication mode. For configurations about the RADIUS scheme and ISP
domain, refer to "Portal Direct Authentication Configuration Examples" on
page 1861.
Configure the access device:
# Configure the portal server as follows:
Name: newpt
■
IP address: 192.168.0.111
■
Key: portal
■
Port number: 50100
■
Portal Configuration Examples (on Routers)
Eth1/1
192. 168.0. 100/24
Router
565.
Portal server
192. 168.0. 111/24
DHCP server
192. 168.0. 112/24
RADIUS server
192. 168.0. 113/24
"DHCP
1863