R3721-F3210-F3171-HP High-End Firewalls Access Control Command Reference-6PW101

45
Portal configuration commands
The following matrix shows the feature and firewall compatibility:
Feature F1000-A-EI/S-EI F1000-E F5000 Firewall module
Portal Yes No No No
access-user detect
Syntax
access-user detect type arp retransmit number interval interval
undo access-user detect
View
Interface view
Default level
2: System level
Parameters
type arp: Uses ARP requests as probe packets.
retransmit number: Specifies the maximum number of times the firewall sends probe packets to a user
before it receives a reply from the user. If this number is reached but the firewall still receives no reply from
the portal user, the firewall considers that the portal user offline and logs out the user. number ranges
from 2 to 5.
interval interval: Specifies the interval for sending probe packets, in the range of 5 to 120, in seconds.
Description
Use access-user detect to configure the online portal user detection function.
Use undo access-user detect to restore the default.
By default, the portal user detection function is not configured on an interface.
With this function configured on an interface, the firewall periodically sends ARP requests to portal users
on the interface to check whether the portal users are still online.
This function is available only for the direct and re-DHCP portal authentication configured on a Layer 3
interface.
Examples
# Configure the portal user detection function on interface GigabitEthernet 0/1, specifying the probe
packets as ARP requests, maximum number of probe attempts as 3, and probe interval as 10 seconds.
<Sysname> system-view
[Sysname] interface gigabitethernet 0/1
[Sysname-GigabitEthernet0/1] access-user detect type arp retransmit 3 interval 10