F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Access Control Command Reference-6PW100

129
portal server
Use portal server to configure a portal server for Layer 3 portal authentication.
Use undo portal server to remove a portal server, restore the default destination port and default URL
address, or delete the shared key or the VPN instance configuration.
Syntax
portal server server-name ip ipv4-address [ key [ cipher | simple ] key-string | port port-id | url url-string
| vpn-instance vpn-instance-name ] *
undo portal server server-name [ key | port | url | vpn-instance ]
Default
No portal server is configured for Layer 3 portal authentication.
Views
System view
Default command level
2: System level
Parameters
server-name: Specifies a name for the portal server, a case-sensitive string of 1 to 32 characters.
ip ipv4-address: Specifies the IPv4 address of the portal server. If you specify the local portal server, the
IP address specified must be that of a Layer 3 interface on the device and must be reachable from the
portal clients.
key: Specifies a shared key for communication with the portal server. Portal packets exchanged between
the access device and the portal server carry an authenticator, which is generated with the shared key.
The receiver uses the authenticator to check the correctness of the received portal packets.
cipher: Sets a ciphertext shared key.
simple: Sets a plaintext shared key.
key-string: Specifies the shared key. This argument is case sensitive. If simple is specified, it must be a
string of 1 to 16 characters. If cipher is specified, it must be a ciphertext string of 1 to 53 characters. If
neither simple nor cipher is specified, you set a plaintext shared key.
port port-id: Specifies the destination port number used when the device sends an unsolicited message
to the portal server, in the range of 1 to 65534. The default is 50100.
url url-string: Specifies the uniform resource locator (URL) to which HTTP packets are to be redirected. The
default URL is in the http://ip-address format, where ip-address is the IP address of the portal server. You
can also specify the domain name of the portal server, in which case you must use the portal
vpn-instance vpn-instance-name: Specifies the VPN to which the portal server belongs. The
vpn-instance-name argument specifies a VPN instance name, which is a case-sensitive string of 1 to 31
characters. If the portal server is on the public network, do not specify this option.
Usage guidelines
If the specified portal server exists and no user is on the interfaces referencing the portal server, using the
undo portal server server-name command removes the specified portal server, and if keyword port or url
is also provided, the command restores the destination port number or URL address to the default.