SNR S2940-8G-v2, Configuration Manual

Page: 364 / 420

SNR S2940-8G-v2 Switch Configuration Guide
Web Portal Configuration
7. Delete the binding information of web portal authentication
Command Explanation
Admin Mode
clear webportal binding { mac WORD | interface
<ethernet IFNAME | IFNAME> | } Delete the binding information of web portal
authentication.
55.3 Web Portal Authentication Typical Example
Switch 1
192.168.40.50
E1/3
E1/4
Switch 2
E1/1
E1/2
PC1 PC2
DHCP
Server
DNS
Server
Portal Server
192.168.40.99
Radius Server
192.168.40.100
E1/2
E1/3
E1/4 E1/5
E1/6
Internet
Figure 55.1: Web portal typical application scene
In the above figure, pc1 is end-user, there is http browser in it, but no 802.1x authentication
client, pc1 wants to access the network through web portal authentication.
Switch1 is the accessing device, it configures accounting server's address and port as RADIUS
server's IP and port, and enable the accounting function. Ethernet 1/0/2 connects to pc1, the port
enables web portal authentication, and configure the redirection address and port as portal server's
IP and port, so ethernet 1/0/2 forbids all flows except dhcp/dns/arp packets.
Switch2 is the aggregation switch, ethernet1/0/2 connects to radius server, ethernet1/0/3 con-
nects to portal server. The address of radius server is 192.168.40.100, the address of portal server
is 192.168.40.99. ethernet1/0/4 connects to DHCP server, ethernet1/0/5 connects to DNS server.
ethernet1/0/6 is trunk port and connects to ethernet1/0/4 of switch1.
The configuration of the common web portal authentication is as follows:
Switch(config)#interface vlan 1
Switch(config-if-vlan1)#ip address 192.168.40.50 255.255.255.0
Switch(config)#webportal enable
Switch(config)#webportal nas-ip 192.168.40.50
Switch(config)#webportal redirect 192.168.40.99
Switch(config)#interface ethernet 1/0/3
364