HP VPN Firewall Appliances Access Control Command Reference

117
Parameters
ipv4-network-address: IPv4 address of the authentication source subnet.
mask-length: Length of the subnet mask, in the range of 0 to 32.
mask: Subnet mask, in dotted decimal notation.
all: Specifies all authentication source subnets.
Usage guidelines
You can use this command to configure multiple portal authentication source subnets on an interface.
Then, only HTTP packets from the subnets can trigger portal authentication on the interface. If an
unauthenticated user is not on any authentication source subnet, the access device discards all the user's
HTTP packets that do not match any portal-free rule.
This command is only applicable for cross-subnet authentication (layer3). The portal authentication
source subnet for direct authentication (direct) can be any source IP address, and the portal
authentication source subnet for re-DHCP authentication (redhcp) is the one determined by the private IP
address of the interface connecting the users.
You can configure up to 16 authentication source subnets.
Examples
# Configure a portal authentication source subnet of 10.10.10.0/24 on GigabitEthernet 0/1 to allow
users from subnet 10.10.10.0/24 to trigger portal authentication.
<Sysname> system-view
[Sysname] interface gigabitethernet 0/1
[Sysname-GigabitEthernet0/1] portal auth-network 10.10.10.0 24
portal delete-user
Use portal delete-user to log off portal users.
Syntax
portal delete-user { ipv4-address | all | interface interface-type interface-number }
Views
System view
Default command level
2: System level
Parameters
ipv4-address: Logs off the portal user with the specified IPv4 address.
all: Logs off all portal users.
interface interface-type interface-number: Logs off all IPv4 portal users on the specified interface.
Examples
# Log out the portal user whose IP address is 1.1.1.1.
<Sysname> system-view
[Sysname] portal delete-user 1.1.1.1