H3C SR8800-F, Configuration Manual, Page: 358 / 502

342
[Router] display portal user interface gigabitethernet 1/0/2
Total portal users: 1
Username: abc
Portal server: newpt
State: Online
VPN instance: N/A
MAC IP VLAN Interface
0015-e9a6-7cfe 20.20.20.2 -- GigabitEthernet1/0/2
Authorization information:
DHCP IP pool: N/A
User profile: N/A
Session group profile: N/A
ACL: N/A
Inbound CAR: N/A
Outbound CAR: N/A
Inbound priority: N/A
Outbound priority: N/A
Example: Configuring cross-subnet portal authentication
Network configuration
As shown in Figure 111 , Router A supports portal authentication. The host accesses Router A
through Router B. A portal server acts as both a portal authentication server and a portal Web server.
A RADIUS server acts as the authentication/accounting server.
Configure Router A for cross-subnet portal authentication. Before passing the authentication, the
host can access only the portal server. After passing the authentication, the user can access other
network resources.
Figure 111 Network diagram
Configuration prerequisites and guidelines
•
Configure IP addresses for the router and servers as shown in Figure 111 and make sure the
host, router, and servers can reach each other.
•
Configure the RADIUS server correctly to provide authentication and accounting functions.
•
Make sure the IP address of the portal device added on the portal authentication server is the IP
address (20.20.20.1) of the router's interface connecting the host. The IP address group
associated with the portal device is the subnet of the host (8.8.8.0/24).