Configuration of authentication subnets applies to only Layer 3 portal authentication.
In direct authentication mode, the authentication subnet is 0.0.0.0/0.
In re-DHCP authentication mode, the authentication subnet of an interface is the subnet to which
the private IP address of the interface belongs.
Specifying the Source IP Address for Portal Packets to Be Sent
After you specify the source IP address for portal packets to be sent, the IP address will be used for
packet exchanging between the access device and the portal server.
Follow these steps to specify the source IP address for portal packets to be sent:
To do...
Enter system view
Enter interface view
Specify the source IP address
for portal packets to be sent
Logging out Users
Logging out a user terminates the authentication process for the user or removes the user from the
authenticated users list.
Follow these steps to log out users:
To do...
Enter system view
Log out users
Specifying a Mandatory Authentication Domain
After you specify a mandatory authentication domain for an interface, the device will use the mandatory
authentication domain for authentication, authorization, and accounting (AAA) of the portal users on the
interface, ignoring the domain names carried in the usernames. Thereby, you can specify different
authentication domains for different interfaces as needed.
Follow these steps to specify an authentication domain for an interface:
Use the command...
system-view
interface interface-type
interface-number
portal nas-ip ip-address
Use the command...
system-view
portal delete-user { ip-address
| all | interface interface-type
interface-number }
1-10
Remarks
—
—
Optional
By default, there is no source IP
address specified for portal
packets and the IP address of
the user login interface will be
used as the source IP address
of the portal packets.
Remarks
—
Required