H3C S7500E Series Ethernet Switches Operation Manual

Operation Manual – Portal
H3C S7500E Series Ethernet Switches Chapter 1 Portal Configuration
1-7
For portal authentication, the re-DHCP authentication process is as follows:
Step 1 through step 6 are the same as those in the direct authentication/Layer 3 portal
authentication process.
1) After receiving an authentication acknowledgment message, the authentication
client obtains a new public IP address through DHCP and notifies the portal server
that it has obtained a public IP address.
2) The portal server notifies the access device that the authentication client has
obtained a new public IP address.
3) Detecting the change of the IP address by examining ARP packets received, the
access device notifies the portal server of the change.
4) The portal server notifies the authentication client of login success.
5) The portal server sends a user IP address change acknowledgment message to
the access device.
If EAD is supported, the following two steps are also included:
1) The security policy server exchanges security authentication information with the
client to check whether the authentication client meets the security requirements.
2) The security policy server authorizes the user to access unrestricted resources
based on the security configuration for the user. The authorization information is
stored on the access device and used by the access device to take control of user
access.
1.2 Portal Configuration Task List
Complete these tasks to configure portal authentication:
Task Remarks
Basic Portal Configuration Required
Configuring a Portal-Free Rule Optional
Configuring an Authentication Subnet Optional
Logging out Users Optional
1.3 Basic Portal Configuration
1.3.1 Configuration Prerequisites
The portal feature provides a solution for user authentication and security
authentication. However, the portal feature cannot implement this solution by itself.
Currently, RADIUS authentication needs to be configured on the access device to
cooperate with the portal feature to complete user authentication.
The prerequisites for portal authentication are as follows: