HPE FlexFabric 5940 SERIES, Руководство по настройке безопасности

Страница: 216 / 571

203
MAC IP VLAN Interface
0015-e9a6-7cfe 10.10.10.4 100 Vlan-interface100
State: Online
VPN instance: --
Authorization information:
DHCP IP pool: N/A
User profile: N/A
Session group profile: N/A
ACL number: 3010
Inbound CAR: N/A
Outbound CAR: N/A
Configuring re-DHCP portal authentication with a
preauthentication domain
Network requirements
As shown in Figure 73 , the host is directly connected to the switch (the access device). The host
obtains an IP address through the DHCP server. A portal server acts as both a portal authentication
server and a portal Web server. A RADIUS server acts as the authentication/accounting server.
Configure re-DHCP portal authentication. Before passing the authentication, the host is assigned a
private IP address and can access only the subnet 192.168.0.0/24. After passing the authentication,
the host gets a public IP address and can access other network resources.
Figure 73 Network diagram
Configuration prerequisites and guidelines
•
Configure IP addresses for the switch and servers as shown in Figure 73 and make sure the
host, switch, and servers can reach each other.
•
Configure the RADIUS server correctly to provide authentication and accounting functions.
•
For re-DHCP portal authentication, configure a public address pool (20.20.20.0/24) and a
private address pool (10.0.0.0/24) on the DHCP server. (Details not shown.)
•
For re-DHCP portal authentication:
{
The switch must be configured as a DHCP relay agent.
{
The portal-enabled interface must be configured with a primary IP address (a public IP
address) and a secondary IP address (a private IP address).