R2511-HP MSR Router Series Security Configuration Guide(V5)

297
Task Remarks
Specifying an authentication domain for portal users
Configuring Layer 2 portal authentication to support Web proxy
Enabling support for portal user moving
Specifying an autoredirection URL for authenticated portal users Optional.
Configuring online Layer 2 portal user detection Optional.
Logging off portal users Optional.
To configure Layer 3 portal authentication:
Task Remarks
Specifying a portal server for Layer 3 portal authentication Required.
Configuring the local portal server Optional.
Enabling Layer 3 portal authentication Required.
Controlling access of portal
users
Configuring a portal-free rule
Optional.
Configuring an authentication source subnet
Configuring an authentication destination subnet
Setting the maximum number of online portal users
Specifying an authentication domain for portal users
Configuring RADIUS related
attributes
Specifying NAS-Port-Type for an interface
Optional.
Specifying the NAS-Port-ID for an interface
Specifying a NAS ID profile for an interface
Specifying a source IP address for outgoing portal packets Optional.
Specifying an autoredirection URL for authenticated portal users Optional.
Configuring portal detection
functions
Configuring online Layer 3 portal user detection
Optional.
Configuring the portal server detection function
Configuring portal user information synchronization
Logging off portal users Optional.
To configure mandatory Web page pushing:
Task Remarks
Configuring mandatory Web page pushing
You cannot configure both the portal function and the
mandatory Web page pushing function on an interface.
Configuration prerequisites
Although the portal feature provides a solution for user identity authentication and security check, the
portal feature cannot implement this solution by itself. RADIUS authentication must be configured on the
access device to cooperate with the portal feature to complete user authentication.