HP VPN Firewall Appliances Access Control Command Reference

126
Parameters
server-name: Specifies a name for the portal server, a case-sensitive string of 1 to 32 characters.
ip ipv4-address: Specifies the IPv4 address of the portal server. If you specify the local portal server, the
IP address specified must be that of a Layer 3 interface on the device and must be reachable from the
portal clients.
key: Specifies a shared key for communication with the portal server. Portal packets exchanged between
the access device and the portal server carry an authenticator, which is generated with the shared key.
The receiver uses the authenticator to check the correctness of the received portal packets.
cipher: Sets a ciphertext shared key.
simple: Sets a plaintext shared key.
key-string: Specifies the shared key. This argument is case sensitive. If simple is specified, it must be a
string of 1 to 16 characters. If cipher is specified, it must be a ciphertext string of 1 to 53 characters. If
neither simple nor cipher is specified, you set a plaintext shared key.
port port-id: Specifies the destination port number used when the device sends an unsolicited message
to the portal server, in the range of 1 to 65534. The default is 50100.
url url-string: Specifies the uniform resource locator (URL) to which HTTP packets are to be redirected. The
default URL is in the http://ip-address format, where ip-address is the IP address of the portal server. You
can also specify the domain name of the portal server, in which case you must use the portal
vpn-instance vpn-instance-name: Specifies the VPN to which the portal server belongs. The
vpn-instance-name argument specifies a VPN instance name, which is a case-sensitive string of 1 to 31
characters. If the portal server is on the public network, do not specify this option.
Usage guidelines
If the specified portal server exists and no user is on the interfaces referencing the portal server, using the
undo portal server server-name command removes the specified portal server, and if keyword port or url
is also provided, the command restores the destination port number or URL address to the default.
The configured portal server and its parameters can be removed or modified only when the portal server
is not referenced by an interface. To remove or modify the settings of a portal server that has been
referenced by an interface, you must first remove the portal configuration on the interface by using the
undo portal command.
For local portal server configuration, the keywords key, port, and url are usually not required and, if
configured, do not take effect.
For security purposes, all keys, including keys configured in plain text, are saved in cipher text.
Examples
# Configure portal server pts, setting the IP address to 192.168.0.111, the plaintext key to portal, and the
redirection URL to h t t p : / / 19 2 .16 8 . 0 .111 / p o r t a l .
<Sysname> system-view
[Sysname] portal server pts ip 192.168.0.111 key simple portal url
http://192.168.0.111/portal
Related commands
display portal server