H3C S7500E Series Ethernet Switches Operation Manual

Operation Manual – Portal
H3C S7500E Series Ethernet Switches Chapter 1 Portal Configuration
1-8
z The portal-enabled interfaces of the access device are configured with valid IP
addresses or have obtained valid IP addresses through DHCP.
z The portal server and the RADIUS server have been installed and configured
properly.
z With re-DHCP authentication, the invalid IP address check function of DHCP relay
is enabled on the access device, and the DHCP server is installed and configured
properly.
z With RADIUS authentication, usernames and passwords of the users are
configured on the RADIUS server, and the RADIUS client configurations are
performed on the access device. For information about RADIUS client
configuration, refer to AAA-RADIUS-HWTACACS Configuration in this manual.
z To implement EAD-supported portal authentication, you need to install and
configure the security policy server and ensure that the ACLs configured on the
access device correspond to those specified for restricted resources and
unrestricted resources on the security policy server respectively. For information
about security policy server configuration, refer to AAA RADIUS HWTACACS
Configuration in this manual.
 Note:
z For configuration about the security policy server, refer to CAMS EAD Security
Policy Component User Manual.
z The ACL for restricted resources and that for unrestricted resources correspond to
isolation ACL and security ACL on the security policy server respectively.
1.3.2 Configuration Procedure
Follow these steps to perform basic portal configuration:
To do… Use the command… Remarks
Enter system view
system-view
—
Configure a portal server
portal server server-name ip
ip-address [ key key-string |
port port-id | url url-string ] *
Required
By default, no portal
server is configured.
Enter interface view
interface interface-type
interface-number
—
Enable portal
authentication on the
interface
portal server server-name
method { direct | layer3 |
redhcp }
Required
Disabled by default