R3303-HP HSR6800 Routers Security Configuration Guide

136
• If the NAS ID is configured using the portal nas-id command, the device uses the configured NAS
ID as that of the interface.
• If the interface does not support NAS ID configuration, or has no NAS ID configured, the device
uses the device name as the interface NAS ID.
To configure a NAS ID profile on an interface:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Create a NAS ID profile and
enter NAS ID profile view.
aaa nas-id profile profile-name
For more information about the
command, see Security Command
Reference.
3. Bind a NAS ID with a VLAN.
nas-id nas-identifier bind vlan
vlan-id
For more information about the
command, see Security Command
Reference.
4. Return to system view.
quit N/A
5. Enter interface view.
interface interface-type
interface-number
N/A
6. Specify a NAS ID profile for
the interface.
portal nas-id-profile profile-name
By default, an interface is specified
with no NAS ID profile.
Specifying a source IP address for outgoing portal
packets
After you specify a source IP address for outgoing portal packets on an interface, the IP address is used
as the source IP address of packets that the access device sends to the portal server, and the destination
IP address of packets that the portal server sends to the access device.
To specify a source IP address for outgoing portal packets:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter interface
view.
interface interface-type
interface-number
N/A
3. Specify a source IP
address for
outgoing portal
packets.
portal nas-ip ip-address
Optional.
By default, no source IP address is specified and
the IP address of the user logon interface is used as
the source IP address of outgoing portal packets.
In NAT environments, HP recommends specifying
the interface's public IP address as the source IP
address of outgoing portal packets.
Specifying a device ID for the access device
Only Layer 3 portal authentication supports this feature.