HP VPN Firewall Appliances Access Control Command Reference

100
Portal commands
Dialer interfaces, virtual-template interfaces, and tunnel interfaces do not support portal authentication.
access-user detect
Use access-user detect to configure the online portal user detection function.
Use undo access-user detect to restore the default.
Syntax
access-user detect type arp retransmit number interval interval
undo access-user detect
Default
The portal user detection function is not configured on an interface.
Views
Interface view
Default command level
2: System level
Parameters
type arp: Uses ARP requests as probe packets.
retransmit number: Specifies the maximum number of times the device sends probe packets to a user
before it receives a reply from the user. If this number is reached but the device still receives no reply from
the portal user, the device considers that the portal user offline and logs out the user. The value for the
number argument ranges from 2 to 5.
interval interval: Specifies the interval for sending probe packets, in the range of 5 to 120, in seconds.
Usage guidelines
When this function is configured on an interface, the interface starts a probe timer (3 minutes, not
configurable). If the interface has not received packets from a portal user when the probe timer expires,
the device sends probe packets (ARP requests) to the portal user. If the device has not received a reply
from the portal user when the maximum number of probes is reached, the device logs off the portal user.
If the device receives a reply from the portal user before the maximum number of probes is reached, it
stops sending probe packets and restarts the probe timer. The device repeats the process to detect
whether portal users are online.
This function is available only for the direct portal authentication configured on a Layer 3 interface.
Examples
# Configure the portal user detection function on interface GigabitEthernet 0/1, specifying the probe
packets as ARP requests, maximum number of probe attempts as 3, and probe interval as 10 seconds.
<Sysname> system-view
[Sysname] interface gigabitethernet 0/1
[Sysname-GigabitEthernet0/1] access-user detect type arp retransmit 3 interval 10