HP VPN Firewall Appliances Access Control Configuration Guide

169
Verifying the configuration
Execute the following command to see whether the portal configuration has taken effect:
[Firewall] display portal interface gigabitethernet 0/2
Portal configuration of GigabitEthernet 0/2
IPv4:
Status: Portal running
Portal server: newpt
Authentication type: Direct
Authentication domain:
Authentication network:
The user can initiate portal authentication by using the HP iNode client or by accessing a webpage. All
the initiated Web requests are redirected to the portal authentication page
h t t p : / / 19 2 .16 8 . 0 .111:8080/portal. Before passing portal authentication, the user can access only the
authentication page. After passing portal authentication, the user can access Internet resources.
After the user passes the portal authentication, you can use the following command to view the portal
user information on the firewall.
[Firewall] display portal user interface gigabitethernet 0/2
Index:19
State:ONLINE
SubState:NONE
ACL:NONE
Work-mode:stand-alone
MAC IP Vlan Interface
---------------------------------------------------------------------
0015-e9a6-7cfe 2.2.2.2 0 GigabitEthernet0/2
On interface GigabitEthernet0/2:total 1 user(s) matched, 1 listed.
Configuring re-DHCP portal authentication
Network requirements
As shown in Figure 122, the host obtains an IP address from the DHCP server.
Configure the firewall to perform re-DHCP portal authentication for users on the host. Before a user
passes portal authentication, the DHCP server assigns a private IP address to the host. After the user
passes portal authentication, the DHCP server assigns a public IP address to the host and then the user
can access Internet resources.
A RADIUS server serves as the authentication/accounting server.