45
View
System view
Default level
2: System level
Parameters
rule-number
: Number for the portal-free rule, in the range of 0 to 15.
any
: Imposes no limitation on the previous keyword.
ip
ip-address
: Specifies an IP address.
mask
{
mask-length
|
netmask
}: Specifies the mask of the IP address, which can be in dotted decimal
notation or an integer in the range of 0 to 32.
interface
interface-type interface-number
: Specifies a source interface.
mac
mac-address
: Specifies a source MAC address in the format of H-H-H.
vlan
vlan-id
: Specifies a source VLAN ID.
all
: Specifies all portal-free rules.
Description
Use the
portal free-rule
command to configure a portal-free rule and specify the source filtering condition
and/or destination filtering condition.
Use the
undo portal free-rule
command to remove a specific portal-free rule or all portal-free rules.
When you use the command, follow these guidelines:
•
If you specify both a source IP address and a source MAC address in a portal-free rule, the IP
address must be a host address with a 32-bit mask. Otherwise, the specified MAC address does not
take effect.
•
If you specify both a VLAN and an interface in a portal-free rule, the interface must belong to the
VLAN.
•
You cannot configure a portal-free rule to have the same filtering criteria as that of an existing one.
When attempted, the system prompts that the rule already exists.
•
No matter whether portal authentication is enabled on an interface, you can only add or remove a
portal-free rule. You cannot modify a portal-free rule.
Related commands:
display portal free-rule
.
Examples
# Configure a portal-free rule, allowing any packet whose source IP address is 10.10.10.1/24 and source
interface is GigabitEthernet 0/0 to bypass portal authentication.
<Sysname> system-view
[Sysname] portal free-rule 15 source ip 10.10.10.1 mask 24 interface gigabitethernet0/0
destination ip any
portal max-user
Syntax
portal max-user
max-number
undo portal max-user
