3Com Switch 8800 Family Configuration Guide
272 CHAPTER 27: PORTAL CONFIGURATION
Network diagram
Figure 66 Network diagram for Portal Direct authentication method
Configuration procedure
n
Only the configurations on switches are listed below. Configurations on the Portal
servers and RADIUS authentication/accounting servers are not described here.
1 Configure the RADIUS scheme
# Create a RADIUS scheme named portal
[SW8800] radius scheme portal
# Set the server type of this RADIUS scheme as Portal
[3Com-radius-portal] server-type portal
# Set the primary authentication and accounting servers of this RADIUS scheme
and their communication keys
[3Com-radius-portal] primary authentication 192.168.1.100
[3Com-radius-portal] primary accounting 192.168.1.100
[3Com-radius-portal] key accounting hello
[3Com-radius-portal] key authentication hello
[3Com-radius-portal] user-name-format without-domain
[3Com-radius-portal] quit
2 Configure ISP domain
# Create an ISP domain named portal
[SW8800] domain portal
# This ISP domain uses the RADIUS scheme named portal
[3Com-isp-portal] radius-scheme portal
[3Com-isp-portal] quit
# Set portal as the default ISP domain of the system (optional)
[SW8800] domain default enable portal
VL AN 2
Internet
Ethernet2/1/10
Switch
User PC
Portal server
RADIUS authentication/accounting server
Vlan -interface 3
172.21.1.1/16
vlan -interface 2
192.168.1.160/16
Ethernet2/1/1
192.168.1.100/16
Ethernet2/1/3
Ethernet2/1/2
192.168.1.200/16
Gateway address: 172.21.1.1
172.21.1.2/16
VL AN 2
Internet
Ethernet2/1/10
VL AN 2
Internet
Ethernet2/1/10
Switch
VL AN 2
Internet
Ethernet2/1/10
Switch
User PC
Portal server
RADIUS authentication/accounting server
Vlan -interface 3
172.21.1.1/16
vlan -interface 2
192.168.1.160/16
Ethernet2/1/1
192.168.1.100/16
Ethernet2/1/3
Ethernet2/1/2
192.168.1.200/16
Gateway address: 172.21.1.1
172.21.1.2/16
User PC
Portal server
RADIUS authentication/accounting server
Vlan -interface 3
172.21.1.1/16
vlan -interface 2
192.168.1.160/16
Ethernet2/1/1
192.168.1.100/16
Ethernet2/1/3
Ethernet2/1/2
192.168.1.200/16
Gateway address: 172.21.1.1
172.21.1.2/16
VL AN 2VL AN 2
Internet
Ethernet2/1/10