F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Access Control Command Reference-6PW100

132
Examples
# Enable Layer 3 portal authentication on interface GigabitEthernet 0/1, referencing portal server pts
and setting the authentication mode to direct.
<Sysname> system-view
[Sysname] interface gigabitethernet 0/1
[Sysname-GigabitEthernet0/1] portal server pts method direct
Related commands
display portal server
portal server server-detect
Use portal server server-detect to configure portal server detection, including the detection method,
action, probe interval, and maximum number of probe attempts. When this function is configured, the
device checks the status of the specified server periodically and takes the specified actions when the
server status changes.
Use undo portal server server-detect to cancel the detection of the specified portal server.
Syntax
portal server server-name server-detect method { http | portal-heartbeat } * action { log | permit-all |
trap } * [ interval interval ] [ retry retries ]
undo portal server server-name server-detect
Default
The portal server detection function is not configured.
Views
System view
Default command level
2: System level
Parameters
server-name: Name of a portal server, a case-sensitive string of 1 to 32 characters. The specified portal
server must have existed.
server-detect method { http | portal-heartbeat }: Specifies the portal server detection method. Two
detection methods are available:
• http: Probes HTTP connections. In this method, the access device periodically sends TCP connection
requests to the HTTP service port of the portal servers enabled on its interfaces. If the TCP
connection with a portal server can be established, the access device considers that the HTTP
service of the portal server is open and the portal server is reachable—the detection succeeds. If the
TCP connection cannot be established, the access device considers that the detection fails—the
portal server is unreachable. If a portal server does not support the portal server heartbeat function,
you can configure the device to use the HTTP probe method to detect the reachability of the portal
server.
• portal-heartbeat: Probes portal heartbeat packets. Portal servers periodically send portal heartbeat
packets to the access devices. If the access device receives a portal heartbeat packet from a portal
server within the specified interval, the access device considers that the probe succeeds and the
portal server is reachable; otherwise, it considers that the probe fails and the portal server is
unreachable. This method is effective on only portal servers that support the portal heartbeat