R2511-HP MSR Router Series Security Configuration Guide(V5)

317
Task Command Remarks
Display information about portal
users on a specific interface or all
interfaces.
display portal user { all | interface interface-type
interface-number } [ | { begin | exclude | include }
regular-expression ]
Available in any
view.
Clear portal connection statistics
on a specific interface or all
interfaces.
reset portal connection statistics {all | interface
interface-type interface-number }
Available in user
view.
Clear portal server statistics on a
specific interface or all interfaces.
reset portal server statistics { all | interface
interface-type interface-number }
Available in user
view.
Clear TCP spoofing statistics. reset portal tcp-cheat statistics
Available in user
view.
Portal configuration examples
Configuring direct portal authentication
Network requirements
As shown in Figure 92, the host is assigned with a public network IP address either manually or through
DHCP.
Configure the router to perform direct portal authentication for users on the host. Before a user passes
portal authentication, the user can access only the portal server. After passing portal authentication, the
user can access Internet resources.
Use a RADIUS server as the authentication/authorization server.
Figure 92 Network diagram
Configuration prerequisites
Configure IP addresses for the host, router, and servers as shown in Figure 92 and make sure that they
can reach each other.
Configure the RADIUS server correctly to provide authentication/authorization functions for users.
Configuring the portal server
This example assumes that the portal server runs on IMC PLAT 5.1 SP1 (E0202P05) and IMC UAM 5.1
(E0301).
1. Configure the portal server: