HP MSR2000/3000/4000 Router Series Security Command Reference

451
Use undo user-sync to restore the default.
Syntax
user-sync timeout timeout
undo user-sync
Default
Portal user synchronization is disabled for the portal authentication server.
Views
Portal authentication server view
Predefined user roles
network-admin
Parameters
timeout timeout: Sets a detection timeout for synchronization packets, in the range of 60 to 18000
seconds. The default is 1200 seconds.
Usage guidelines
Portal user synchronization requires that the portal authentication server support the portal user heartbeat
function. Now, only the IMC portal authentication server supports portal user heartbeat. To implement
portal user synchronization, you need to configure the user heartbeat function on the portal
authentication server. Make sure the user heartbeat interval configured on the portal authentication
server is not greater than the synchronization detection timeout configured on the access device.
Deleting a portal authentication server on the device also deletes the user synchronization configuration
for the server.
If you configure portal user synchronization multiple times for a portal authentication server, the most
recent configuration takes effect.
For information of the users considered as nonexistent on the portal authentication server, the device
deletes the information after the configured detection timeout expires.
If the user information from the portal authentication server does not exist on the device, the device
encapsulates IP addresses of the users in user heartbeat reply packets to the server. The portal
authentication server then deletes the users.
Examples
# Enable portal user synchronization for portal authentication server pts and set the detection timeout to
600 seconds. If a use has not appeared in the synchronization packets sent by the portal authentication
server for 600 seconds, the access device logs out the user.
<Sysname> system-view
[Sysname] portal server pts
[Sysname-portal-server-pts] user-sync timeout 600
Related commands
portal server
vpn-instance
Use vpn-instance to specify the MPLS L3VPN where a portal Web server resides.