R3303-HP 6600/HSR6600 Routers Security Command Reference

183
ip ip-address: Specifies the IP address of the portal server. In portal stateful failover environments, HP
recommends specifying the virtual IP address of the VRRP group to which the downlink belongs as the
portal server IP address.
key: Specifies a shared key for communication with the portal server. Portal packets exchanged between
the access device and the portal server carry an authenticator, which is generated with the shared key.
The receiver uses the authenticator to check the correctness of the received portal packets.
cipher: Sets a ciphertext shared key.
simple: Sets a plaintext shared key.
key-string: Specifies the shared key. This argument is case sensitive. If simple is specified, it must be a
string of 1 to 16 characters. If cipher is specified, it must be a ciphertext string of 1 to 53 characters. If
neither simple nor cipher is specified, you set a plaintext shared key.
port port-id: Specifies the destination port number used when the device sends an unsolicited message
to the portal server, in the range of 1 to 65534. The default is 50100.
server-type { cmcc | imc }: Specifies the portal server type. The default is imc.
• cmcc—CMCC portal server. To use a CMCC portal server, you must also specify a device ID for the
access device by using the portal device-id command.
• imc—HP IMC portal server portal server.
url url-string: Specifies the uniform resource locator (URL) to which HTTP packets are to be redirected. The
default URL is in the http://ip-address format, where ip-address is the IP address of the portal server. You
can also specify the domain name of the portal server, in which case you must use the portal free-rule
command to configure the IP address of the DNS server as a portal authentication-free destination IP
address.
vpn-instance vpn-instance-name: Specifies the MPLS L3VPN to which the portal server belongs.
vpn-instance-name is a case-sensitive string of 1 to 31 characters. If the portal server is on the public
network, do not specify this option.
Usage guidelines
If the specified portal server exists and no user is on the interfaces referencing the portal server, using the
undo portal server server-name command removes the specified portal server, and if keyword port,
server-type, or url is also provided, the command restores the destination port number or URL address to
the default.
The configured portal server and its parameters can be removed or modified only when the portal server
is not referenced by an interface. To remove or modify the settings of a portal server that has been
referenced by an interface, you must first remove the portal configuration on the interface by using the
undo portal command.
For security purposes, all passwords, including passwords configured in plain text, are saved in cipher
text to the configuration file.
Examples
# Configure portal server pts, setting the IP address to 192.168.0.111, t h e ke y t o portal in plain text, and
the redirection URL to http://192.168.0.113 / p o r t a l .
<Sysname> system-view
[Sysname] portal server pts ip 192.168.0.111 key simple portal url
http://192.168.0.113/portal
Related commands
• display portal server