R0106-HP MSR Router Series Security Configuration Guide(V7)

118
• With re-DHCP portal authentication, HP recommends that you also configure authorized ARP on the
interface to make sure only valid users can access the network. With authorized ARP configured on
the interface, the system learns ARP entries only from the users who have obtained a public address
from DHCP.
• An IPv6 portal server does not support the re-DHCP portal authentication mode.
• You can enable both IPv4 portal authentication and IPv6 portal authentication on an interface.
Configuration procedure
To enable portal authentication on an interface:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter interface view.
interface interface-type
interface-number
The interface must be a Layer
3 interface.
3. Enable portal authentication
on the interface.
• To enable IPv4 portal authentication:
portal enable method { direct |
layer3 | redhcp }
• To enable IPv6 portal authentication:
portal ipv6 enable method { direct |
layer3 }
Enable IPv4 portal
authentication, IPv6 portal
authentication, or both on the
interface.
Referencing a portal Web server for an interface
After you reference a portal Web server for an interface, the device redirects the HTTP requests of the
portal users on the interface to the portal Web server.
An interface can reference both an IPv4 portal Web server and an IPv6 portal Web server.
To reference a portal Web server for an interface:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter interface view.
interface interface-type interface-number
The interface must be a Layer 3
interface.
3. Reference a portal
Web server for the
interface.
• To reference an IPv4 portal Web server:
portal apply web-server server-name
[ fail-permit ]
• To reference an IPv6 portal Web server:
portal ipv6 apply web-server server-name
[ fail-permit ]
Reference an IPv4 portal Web
server, an IPv6 portal Web
server, or both for the interface.
By default, the interface does
not reference any portal Web
server.