H3C S5500-SI Series, Руководство по эксплуатации

Страница: 650 / 1217

1-15
# Configure dm1 as the default ISP domain for all users. Then, if a user enters the username without the
ISP domain at login, the authentication and accounting methods of the default domain will be used for
the user.
[Switch] domain default enable dm1
4) Configure portal authentication
# Configure the portal server as follows:
z
Name: newpt
z
IP address: 192.168.0.111
z
Key: portal
z
Port number: 50100
z
URL: http://192.168.0.111/portal.
[Switch] portal server newpt ip 192.168.0.111 key portal port 50100 url
http://192.168.0.111/portal
# Enable portal authentication on the interface connecting the host.
[Switch] interface vlan-interface 100
[Switch–Vlan-interface100] portal server newpt method direct
[Switch] quit
Configuring Re-DHCP Portal Authentication
Network requirements
z
The host is directly connected to the switch and the switch is configured for re-DHCP
authentication. The host is assigned with an IP address through the DHCP server. Before portal
authentication, the host uses an assigned private IP address. After passing portal authentication, it
can get a public IP address and then users using the host can access unrestricted Internet
resources.
z
A RADIUS server serves as the authentication/accounting server.
Figure 1-10 Configure re-DHCP portal authentication
Configuration procedure