H3C S7500E Series Ethernet Switches Operation Manual

Operation Manual – Portal
H3C S7500E Series Ethernet Switches Chapter 1 Portal Configuration
1-17
# Configure the portal server as follows:
z Name: newpt
z IP address: 192.168.0.111
z Key: portal
z Port number: 50100
z URL: http://192.168.0.111/portal.
<SwitchA> system-view
[SwitchA] portal server newpt ip 192.168.0.111 key portal port 50100 url
http://192.168.0.111/portal
# Enable portal authentication on the interface connecting Switch B.
[SwitchA] interface vlan-interface 4
[SwitchA–Vlan-interface4] ip address 20.20.20.1 255.255.255.0
[SwitchA–Vlan-interface4] portal server newpt method layer3
[SwitchA–Vlan-interface4] quit
# Configure the IP address of the interface connected with the portal server.
[SwitchA] interface vlan-interface 2
[SwitchA–Vlan-interface2] ip address 192.168.0.100 255.255.255.0
[SwitchA–Vlan-interface2] quit
On Switch B, you need to configure a default route to subnet 192.168.0.0/24, setting
the next hop as 20.20.20.1. The configuration steps are omitted.
1.8.4 Example for Configuring Direct EAD-Supported Portal Authentication
I. Network requirements
z The switch is configured for direct EAD-supported portal authentication. When
users have passed identity authentication but have not passed security
authentication, they can access only subnet 192.168.0.0/24. After passing
security authentication, they can access unrestricted Internet resources.
z A RADIUS server serves as the authentication/accounting server.
z A security policy server is required.