F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Access Control Command Reference-6PW100

104
from the portal user when the maximum number of probes is reached, the device logs off the portal user.
If the device receives a reply from the portal user before the maximum number of probes is reached, it
stops sending probe packets and restarts the probe timer. The device repeats the process to detect
whether portal users are online.
This function is available only for the direct and re-DHCP portal authentication configured on a Layer 3
interface.
Examples
# Configure the portal user detection function on interface GigabitEthernet 0/1, specifying the probe
packets as ARP requests, maximum number of probe attempts as 3, and probe interval as 10 seconds.
<Sysname> system-view
[Sysname] interface gigabitethernet 0/1
[Sysname-GigabitEthernet0/1] access-user detect type arp retransmit 3 interval 10
display portal acl
Use display portal acl to display the ACLs on a specific interface.
Syntax
display portal acl { all | dynamic | static } interface interface-type interface-number [ | { begin | exclude
| include } regular-expression ]
Views
Any view
Default command level
1: Monitor level
Parameters
all: Displays all portal ACLs, including dynamic and static portal ACLs.
dynamic: Displays dynamic portal ACLs—ACLs generated dynamically after a user passes portal
authentication.
static: Displays static portal ACLs—ACLs generated through portal related configuration, such as
portal-free rule configuration.
interface interface-type interface-number: Displays the ACLs on the specified interface.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Getting Started Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# Display all ACLs on interface GigabitEthernet 0/1.
<Sysname> display portal acl all interface gigabitethernet 0/1
IPv4 portal ACL rules on GigabitEthernet0/1:
Rule 0
Inbound interface : GigabitEthernet0/1