HP HP 830 Series, Руководство по настройке, Страница: 374 / 530

362
Figure 366 Applying a portal server to a Layer 3 interface
3. Configure Layer 3 portal authentication as described in Table 109 .
4. Click Apply .
Table 109 Configuration items
Item Description
Interface Select the Layer 3 interface to be enabled with portal authentication.
Portal Server
Select the portal server to be applied on the selected interface. Options include:
•
Select Server —Select an existing portal server from the portal server drop-down list.
•
New Server —If you select this option from the drop-down list, the portal server
configuration area (see Figure 367 ) will be displayed at the lower part of the page.
You can add a remote portal server and apply the portal server to the Layer 3
interface. For configuration details, see Table 110 .
•
Enable Local Server —If you select this option from the drop-down list, the local portal
service configuration area (see Figure 368 ) will be displayed at the lower part of the
page. You can configure the parameters for the Layer 3 local portal service. For
configuration details, see Table 111 .
Method
Specify the portal authentication mode, which can be:
•
Direct —Direct portal authentication.
•
Layer3 —Cross-subnet portal authentication.
IMPORTANT:
Cross-subnet portal authentication mode does not require Layer 3 forwarding devices to be
present between the authentication client and the access device. However, if there are Layer
3 forwarding devices between the authentication client and the access device, you must
select the cross-subnet portal authentication mode.
Auth Network IP Enter the IP address and mask of the authentication subnet. This field is configurable
when you select the
Layer3 mode (cross-subnet portal authentication).
By configuring an authentication subnet, you specify that only HTTP packets from users on
the authentication subnet can trigger portal authentication. If an unauthenticated user is
not on any authentication subnet, the access device discards all the user's HTTP packets
that do not match any portal-free rule.
IMPORTANT:
The authentication subnet in direct mode is any source IP address.
Network Mask