4000 Router Series Security Command Reference

442

Predefined user roles

network-admin

Parameters

ipv4-network-address: Specifies an IPv4 portal authentication source subnet address.

mask-length: Specifies the subnet mask length of the IPv4 address, in the range of 0 to 32.

mask: Specifies the subnet mask in dotted decimal format.

Usage guidelines

With IPv4 authentication source subnets configured, only packets from IPv4 users on the authentication

source subnets can trigger portal authentication. If an unauthenticated IPv4 user is not on any

authentication source subnet, the access device discards all the user's packets that do not match any

portal-free rule.

If you do not specify the ipv4-network-address argument in the undo portal layer3 source command, this

command deletes all IPv4 portal authentication source subnets on the interface.

Only cross-subnet authentication supports authentication source subnets.

If you configure both an authentication source subnet and an authentication destination subnet on an

interface, only the authentication destination subnet takes effect.

Examples

# Configure an IPv4 portal authentication source subnet of 10.10.10.0/24 on interface Ethernet 1/1.

<Sysname> system-view

[Sysname] interface Ethernet1/1

[Sysname–Ethernet1/1] portal layer3 source 10.10.10.0 24

Related commands

• display portal interface

• portal free-all except destination

portal max-user

Use portal max-user to set the maximum number of online portal users allowed in the system.

Use undo portal max-user to restore the default.

Syntax

portal max-user max-number

undo portal max-user

Default

The maximum number of online portal users is not limited.

Views

System view

Predefined user roles

network-admin