HP MSR2000/3000/4000 Router Series Security Configuration Guide

316
Verifying the configuration
Verify that the portal configuration has taken effect.
[Router] display portal interface ethernet 1/2
Portal information of Ethernet 1/2
IPv4:
Portal status: Enabled
Authentication type: Direct
Portal Web server: newpt
Authentication domain: Not configured
Bas-ip: 2.2.2.1
User Detection: Not configured
Action for server detection:
Server type Server name Action
-- -- --
Layer3 source network:
IP address Mask
Destination authenticate subnet:
IP address Mask
A user can perform portal authentication by using the HP iNode client or through Web page. Before
passing the authentication, the user can access only the authentication page
http://192.168.0.111:8080/portal and all Web requests will be redirected to the authentication page.
After passing the authentication, the user can access Internet resources.
After the user passes authentication, you can use the following command to display information about
the portal user.
[Router] display portal user interface ethernet 1/2
Total portal users: 1
Username: abc
Portal server: newpt
State: Online
Authorization ACL: None
VPN instance: None
MAC IP VLAN Interface
0015-e9a6-7cfe 2.2.2.2 -- Ethernet1/2
Configuring re-DHCP portal authentication
Network requirements
As shown in Figure 94, the host is directly connected to the router (the access device). The host obtains
an IP address through the DHCP server. A portal server serves as both a portal authentication server and
a portal Web server. A RADIUS server serves as the authentication/accounting server.
Configure re-DHCP portal authentication. Before passing the authentication, the host is assigned a
private IP address. After passing the authentication, the host gets a public IP address and can access
Internet resources.