Configuring Direct Portal Authentication With Extended Functions - HP 4800G Series Configuration Manual

Table of Contents

# Configure the ISP domain to use RADIUS scheme rs1.

[SwitchA-isp-dm1] authentication portal radius-scheme rs1

[SwitchA-isp-dm1] authorization portal radius-scheme rs1

[SwitchA-isp-dm1] accounting portal radius-scheme rs1

[SwitchA-isp-dm1] quit

# Configure dm1 as the default ISP domain for all users. Then, if a user enters the username without the

ISP domain at login, the authentication and accounting methods of the default domain will be used for

[SwitchA] domain default enable dm1

Configure portal authentication

# Configure the portal server as follows:

IP address: 192.168.0.111

Port number: 50100

URL: http://192.168.0.111/portal.

http://192.168.0.111/portal

# Enable portal authentication on the interface connecting Switch B.

[SwitchA] interface vlan-interface 4

[SwitchA–Vlan-interface4] portal server newpt method layer3

[SwitchA–Vlan-interface4] quit

# Configure the IP address of the interface connected with the portal server.

[SwitchA] interface vlan-interface 2

[SwitchA–Vlan-interface2] ip address 192.168.0.100 255.255.255.0

[SwitchA–Vlan-interface2] quit

On Switch B, you need to configure a default route to subnet 192.168.0.0/24, setting the next hop as

20.20.20.1. The configuration steps are omitted.

Configuring Direct Portal Authentication with Extended Functions

Network requirements

The host is directly connected to the switch and the switch is configured for direct extended portal

authentication. The host is assigned with a public network IP address manually or automatically by

a DHCP server. When users using the host have passed identity authentication but have not

passed security authentication, they can access only subnet 192.168.0.0/24. After passing security

authentication, they can access unrestricted Internet resources.

A RADIUS server serves as the authentication/accounting server.

192.168.0.111

Table of Contents