Example For Configuring Layer 3 Portal Authentication - H3C S7500E Series Operation Manual

Operation Manual – Portal
H3C S7500E Series Ethernet Switches
[Switch–Vlan-interface100] portal server newpt method redhcp
[Switch–Vlan-interface100] quit
# Configure the IP address of the interface connected with the portal server.
[Switch] interface vlan-interface 2
[Switch–Vlan-interface2] ip address 192.168.0.100 255.255.255.0
[Switch–Vlan-interface2] quit

1.8.3 Example for Configuring Layer 3 Portal Authentication

I. Network requirements
Switch A is configured for Layer 3 portal authentication. Before portal
authentication, users can access only the portal server. After passing portal
authentication, they can access external networks.
The host accesses Switch A through Switch B
A RADIUS server serves as the authentication/accounting server.
II. Network diagram
Host
8.8.8.2/24
Figure 1-6 Network diagram for Layer 3 portal authentication
III. Configuration procedure
Note:
You need to configure IP addresses for the devices as shown in
ensure that routes are available between devices.
The following describes only the major configurations related to Layer 3 portal
authentication. For configurations about the RADIUS scheme and ISP domain, refer
to Example for Configuring Direct Portal
Configure Switch A:
Switch A
Vlan-int2
192.168.0.100/24
Vlan-int4
20.20.20.1/24
Vlan-int2
20.20.20.2/24
Vlan-int4
8.8.8.1/24
Switch B
Portal server
192.168.0.111/24
RADIUS server
192.168.0.112/24
Authentication.
1-16
Chapter 1 Portal Configuration
Figure 1-6 and