R3102-R3103-HP 6600/HSR6600 Routers Security Configuration Guide

140
Specifying a source IP address for outgoing portal
packets
After you specify a source IP address for outgoing portal packets on an interface, the IP address is used
as the source IP address of packets that the access device sends to the portal server, and the destination
IP address of packets that the portal server sends to the access device.
To specify a source IP address for outgoing portal packets:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter interface
view.
interface interface-type
interface-number
N/A
3. Specify a source IP
address for
outgoing portal
packets.
portal nas-ip ip-address
Optional.
By default, no source IP address is specified and
the IP address of the user logon interface is used as
the source IP address of outgoing portal packets.
In NAT environments, HP recommends specifying
the interface's public IP address as the source IP
address of outgoing portal packets.
Configuring portal stateful failover
CAUTION:
• Specifying or changing the device ID of a device will log off all online users on the device. Therefore,
perform the confi
g
uration only when necessary and, after the confi
g
uration, save the confi
g
uration and
restart the device.
• When two devices are running in stateful failover mode (one active, the other standby), do not delete the
configured backup source IP addresses. Otherwise, online users on the backup may not be able to
receive packets from the server.
The following matrix shows the feature and router compatibility:
Feature 6602 HSR6602 6604/6608/6616
Portal stateful failover Yes Yes No
To implement stateful failover for portal, configure VRRP for traffic switchover, and perform the following
configurations for service backup on each of the two devices that back up each other:
• Specify an interface for backing up portal services, which is referred to as portal service backup
interface in this document, and enable portal on the portal service backup interface. The portal
service backup interface is different from the stateful failover interface. Stateful failover interfaces
only forward state negotiation messages and backup data.