Portal Layer 3 Portal Authentication Configuration Examples - 3Com MSR 50 Series Configuration Manual

1864 C 98: P
HAPTER ORTAL
Portal Layer 3 Portal
Authentication
Configuration Examples
C
ONFIGURATION
URL: http://192.168.0.111/portal.
■
<Router> system-view
[Router] portal server newpt ip 192.168.0.111 key portal port 50100
url http://192.168.0.111/portal
# Configure the DHCP relay agent, and enable invalid address check on the DHCP
relay agent.
[Router] dhcp enable
[Router] dhcp relay server-group 0 ip 192.168.0.112
[Router] interface ethernet 1/0
[Router-Ethernet1/0] ip address 20.20.20.1 255.255.255.0
[Router-Ethernet1/0] ip address 10.0.0.1 255.255.255.0 sub
[Router-Ethernet1/0] dhcp select relay
[Router-Ethernet1/0] dhcp relay server-select 0
[Router-Ethernet1/0] dhcp relay address-check enable
# Enable portal authentication on the interface connected to the host.
[Router-Ethernet1/0] portal server newpt method redhcp service-type normal
[Router-Ethernet1/0] quit
# Configure the IP address of the interface which communicates with the portal
server.
[Router] interface ethernet 1/1
[Router-Ethernet1/1] ip address 192.168.0.100 255.255.255.0
[Router-Ethernet1/1] quit
Network requirements
Router A supports the portal authentication function. The host accesses Router
■
A via Router B.
The Router A is configured with layer 3 authentication. Before portal
■
authentication, users can access only the portal server. After passing portal
authentication, they can access external networks.
A RADIUS server serves as the authentication/accounting server.
■
Network diagram
Figure 541 Network diagram for Layer 3 authentication (on routers)
Eth 1/0
20. 20. 20.1 /24
Eth 1/0
8 .8.8.1/ 24
Host
8 .8.8.2/ 24
Router A
Eth 1/1
192. 1 68. 0.100/ 24
192.168.0.111/ 24
Eth 1/1
20.20.20.2/24
Router B
RADIUS server
192.168.0.112/ 24
Portal server