327
Step Command
Remarks
3.
Set the portal HTTP attack
defense parameters.
portal http-defense
{
block-timeout
minutes
|
statistics-interval
value
|
threshold
number
} *
By default, the blocking timer is 10
minutes, the statistical interval for
counting redirected HTTP packets
is 5 minutes, and the blocking
threshold is 6000 packets.
4.
Set the maximum number of
destination IP addresses for
portal HTTP attack defense.
portal http-defense
max-ip-number
max-ip-number
By default, the device can perform
portal HTTP attack defense for a
maximum of 4096 destination IP
addresses.
Setting the user traffic backup threshold
About setting the user traffic backup threshold
The device backs up traffic for a user when the user's traffic reaches the user traffic backup threshold.
A smaller threshold provides more accurate backup for user traffic. However, when a large number of
users exist, a small threshold results in frequent user traffic backups, affecting the user online, offline,
and accounting processes. Set a proper threshold to balance between service performance and
traffic backup accuracy.
Procedure
To set the user traffic backup threshold:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Set the user traffic backup
threshold.
portal traffic-backup threshold
value
By default, the user traffic backup
threshold is 10 MB.
Logging out online portal users
This feature deletes users that have passed portal authentication and terminates ongoing portal
authentications.
When the number of online users exceeds 2000, executing the
portal delete-user
command takes a
few minutes. To ensure successful logout of online users, do not perform the following operations
during the command execution:
•
Active/standby MPU switchover.
•
Disabling portal authentication on the interface.
To log out online users:
Step Command
1.
Enter system view.
system-view
2.
Log out IPv4 online portal users.
portal
delete-user
{
ipv4-address
|
all
|
interface
interface-type
interface-number
|
session-id
session-id
|
username
username
}
3.
Log out IPv6 online portal users.
portal
delete-user
{
all
|
interface
interface-type interface-number
|
ipv6
ipv6-address
|
session-id
session-id
|
username
username
}