Configuring A Portal-Free Rule - H3C S7500E Series Operation Manual

Operation Manual – Portal
H3C S7500E Series Ethernet Switches
Caution:
The destination port number that the device uses for sending packets to the portal
server unsolicitedly must be the same as that the remote portal server actually uses.
The portal server parameters are modifiable. However, if the portal server is applied
to an interface and portal authentication has been enabled on the interface, you
cannot remove the portal server; if there are users on the interface, you cannot
modify the parameters.
The portal server to be referenced must exist.
Only Layer 3 authentication mode can be used in applications with Layer 3
forwarding devices present between the authentication clients and the access
device. However, Layer-3 authentication does not require any Layer-3 forwarding
devices between the access device and the authentication clients.
In re-DHCP authentication mode, a user is allowed to send packets using a public IP
address before portal authentication, but the corresponding response packets are
restricted.

1.4 Configuring a Portal-Free Rule

A portal-free rule allows specified users to access specified external websites without
portal authentication. Packets matching a portal-free rule will not trigger portal
authentication and the users can directly access the specified external websites.
Follow these steps to configure a portal-free rule:
To do...
Enter system view
Configure a
portal-free rule
Use the command...
system-view
portal free-rule rule-number
{ destination { any | ip { ip-address
mask { mask-length | netmask } | any } } |
source { any | [ interface interface-type
interface-number | ip { ip-address mask
{ mask-length | mask } | any } | mac
mac-address | vlan vlan-id ] * } } *
1-9
Chapter 1 Portal Configuration
Remarks
—
Required