322
synchronization feature. This feature is implemented by sending and detecting portal
synchronization packets, as follows:
1.
The portal authentication server sends the online user information to the access device in a
synchronization packet at the user heartbeat interval.
The user heartbeat interval is set on the portal authentication server.
2.
Upon receiving the synchronization packet, the access device compares the users carried in
the packet with its own user list and performs the following operations:
{
If a user contained in the packet does not exist on the access device, the access device
informs the portal authentication server to delete the user. The access device starts the
synchronization detection timer (
timeout timeout
) immediately when a user logs in.
{
If the user does not appear in any synchronization packet within a synchronization detection
interval, the access device considers the user does not exist on the portal authentication
server and logs the user out.
Restrictions and guidelines
When you configure portal user synchronization, follow these restrictions and guidelines:
•
Portal user synchronization requires a portal authentication server to support the portal user
heartbeat function. Only the IMC portal authentication server supports the portal user heartbeat
function. To implement the portal user synchronization feature, you also need to configure the
user heartbeat function on the portal authentication server. Make sure the user heartbeat
interval configured on the portal authentication server is not greater than the synchronization
detection timeout configured on the access device.
•
Deleting a portal authentication server on the access device also deletes the user
synchronization configuration for the portal authentication server.
Procedure
To configure portal user information synchronization:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter portal authentication
server view.
portal server server-name
N/A
3.
Configure portal user
synchronization.
user-sync timeout timeout
By default, portal user
synchronization is disabled.
Configuring portal packet attributes
Configuring the BAS-IP or BAS-IPv6 attribute
About the BAS-IP or BAS-IPv6 attribute in portal packets
If the device runs Portal 2.0, the unsolicited packets sent to the portal authentication server must
carry the BAS-IP attribute. If the device runs Portal 3.0, the unsolicited packets sent to the portal
authentication server must carry the BAS-IP or BAS-IPv6 attribute.
After this attribute is configured, the source IP address for unsolicited notification portal packets the
device sends to the portal authentication server is the configured BAS-IP or BAS-IPv6 address. If the
attribute is not configured, the source IP address of the portal packets is the IP address of the packet
output interface.
