R2511-HP MSR Router Series Security Command Reference(V5)

350
Portal configuration commands
access-user detect
Use access-user detect to configure the online portal user detection function.
Use undo access-user detect to restore the default.
Syntax
access-user detect type arp retransmit number interval interval
undo access-user detect
Default
The portal user detection function is not configured on an interface.
Views
Interface view
Default command level
2: System level
Parameters
type arp: Uses ARP requests as probe packets.
retransmit number: Specifies the maximum number of times the device sends probe packets to a user
before it receives a reply from the user. If this number is reached but the device still receives no reply from
the portal user, the device considers that the portal user offline and logs out the user. The value range for
the number argument is 2 to 5.
interval interval: Specifies the interval for sending probe packets, in the range of 5 to 120 seconds.
Usage guidelines
When this function is configured on an interface, the interface starts a probe timer (3 minutes, not
configurable). If the interface has not received packets from a portal user when the probe timer expires,
the device sends probe packets (ARP requests) to the portal user. If the device has not received a reply
from the portal user when the maximum number of probes is reached, the device logs off the portal user.
If the device receives a reply from the portal user before the maximum number of probes is reached, it
stops sending probe packets and restarts the probe timer. The device repeats the process to detect
whether portal users are online.
This function is available only for the direct and re-DHCP portal authentication configured on a Layer 3
interface.
Examples
# Configure the portal user detection function on interface Ethernet 1/1, specifying the probe packets as
ARP requests, maximum number of probe attempts as 3, and probe interval as 10 seconds.
<Sysname> system-view
[Sysname] interface ethernet 1/1
[Sysname-Ethernet1/1] access-user detect type arp retransmit 3 interval 10