H3C S7500E Series Ethernet Switches Operation Manual

Operation Manual – Portal
H3C S7500E Series Ethernet Switches Chapter 1 Portal Configuration
1-10
 Note:
z If you specify both a VLAN and an interface in a portal-free rule, the interface must
belong to the VLAN.
z You cannot configure two or more portal-free rules with the same filtering conditions.
Otherwise, the system prompts that the rule already exists.
1.5 Configuring an Authentication Subnet
By configuring authentication subnets, you specify that only packets from users on the
authentication subnets trigger portal authentication. Packets that are neither from
portal-free users nor from authentication subnets are discarded.
Follow these steps to configure an authentication subnet:
To do… Use the command… Remarks
Enter system view
system-view
—
Enter interface view
interface interface-type
interface-number
—
Configure an
authentication
subnet
portal auth-network
network-address
{ mask-length | mask }
Optional
By default, the authentication
subnet is 0.0.0.0/0, which means
that users with any source IP
addresses are to be
authenticated.
 Note:
z Configuration of authentication subnets applies to only Layer 3 portal
authentication.
z In direct authentication mode, the authentication subnet is 0.0.0.0/0.
z In re-DHCP authentication mode, the authentication subnet of an interface is the
subnet to which the private IP address of the interface belongs.
1.6 Logging out Users
Logging out a user terminates the authentication process for the user or removes the
user.
Follow these steps to log out users: