273
mdc-admin
Parameters
ipv4-network-address
: Specifies an IPv4 portal authentication subnet address.
mask-length
: Specifies the subnet mask length for the authentication subnet address, in the range of
0 to 32.
mask
: Specifies the subnet mask in dotted decimal format.
Usage guidelines
Portal users on the interface are authenticated when accessing the specified authentication
destination subnet (except IP addresses and subnets specified in portal-free rules). The users can
access other subnets without portal authentication.
You can configure multiple authentication destination subnets.
If you do not specify the
ipv4-network-address
argument in the
undo portal free-all except
destination
command, this command deletes all IPv4 portal authentication destination subnets on
the interface.
Re-DHCP authentication does not support authentication destination subnets.
If you configure both an authentication source subnet and an authentication destination subnet on an
interface, only the authentication destination subnet takes effect.
Examples
# Configure an IPv4 portal authentication destination subnet of
11.11.11.0
/
24
on VLAN-interface 2.
Portal users need to pass authentication to access this subnet and can access other subnets without
authentication.
<Sysname> system-view
[Sysname] interface vlan-interface 2
[Sysname–Vlan-interface2] portal free-all except destination 11.11.11.0 24
Related commands
display portal
portal free-rule
Use
portal free-rule
to configure an IP-based portal-free rule.
Use
undo portal free-rule
to delete portal-free rules.
Syntax
portal free-rule
rule-number
{
destination
ip
{
ipv4-address
{
mask-length
|
mask
} |
any
} [
tcp
tcp-port-number
|
udp
udp-port-number
] |
source
ip
{
ipv4-address
{
mask-length
|
mask
} |
any
}
[
tcp
tcp-port-number
|
udp
udp-port-number
] } * [
interface interface-type interface-number
]
portal free-rule
rule-number
{
destination
ipv6
{
ipv6-address
prefix-length
|
any
} [
tcp
tcp-port-numbe
r |
udp
udp-port-number
]
|
source
ipv6
{
ipv6-address prefix-length
|
any
} [
tcp
tcp-port-number
|
udp
udp-port-number
] } * [
interface interface-type interface-number
]
undo portal free-rule
{
rule-number
|
all
}
Default
No IP-based portal-free rule is configured.
Views
System view
