R3303-HP 6600/HSR6600 Routers Security Configuration Guide

140
Ste
p
Command Remarks
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Specify the portal group to
which the portal service
backup interface belongs.
portal backup-group group-id
By default, the portal service
backup interface does not belong
to any portal group.
The portal service backup
interfaces on the two devices for
stateful failover must belong to the
same portal group.
4. Return to system view.
quit
N/A
5. Specify the device ID in
stateful failover mode.
nas device-id device-id
By default, the device operates in
stand-alone mode, and thus has no
device ID configured.
For more information about the
command, see Security Command
Reference.
6. Specify a backup source IP
address for outgoing RADIUS
packets.
• Method 1:
radius nas-backup-ip
ip-address [ vpn-instance
vpn-instance-name ]
• Method 2:
a. radius scheme
radius-scheme-name
b. nas-backup-ip ip-address
Optional.
Use either Method.
By default, no backup source IP
address is specified.
You do not need to specify the
backup source IP address if the
device uses the virtual IP address of
the VRRP group to which the uplink
belongs as the source IP address of
outgoing RADIUS packets.
For more information about the
command, see Security Command
Reference.
Specifying an autoredirection URL for authenticated
portal users
If you specify an autoredirection URL on the access device, after an unauthenticated user passes portal
authentication through the portal authentication page, the access device redirects the user to the URL.
To use this feature for remote Layer 3 portal authentication, the portal server must be an IMC portal server
that supports the page auto-redirection function.
To specify an autoredirection URL for authenticated portal users:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A