Ruijie RG-S2900G-E Series, Руководство по настройке

Страница: 587 / 943

Configuration Guide WEB Authentication Configuration
By default, the device only intercepts messages with TCP port 80. To add new port number for
intercepting, perform the following steps:
Command Function
Ruijie# configure terminal
Enter the global configuration mode.
Ruijie(config)# http redirect port
port-num
Configure to intercept HTTP requests with the specified TCP
port number. Allow to configure a maximum of 10
interception ports.
Ruijie(config)# show http redirect View the configurations of HTTP redirection.
To delete the interception ports, use the no http redirect port port-num command in the global
configuration mode.
Configuration example:
# Redirect HTTP request with the specific destination port number 8080 sent by the user.
Ruijie# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Ruijie(config)# http redirect port 8080
Ruijie(config)# show http redirect
1. The commonly-used management ports on the access device, such as port 22, 23 and
53 and ports reserved by the system are not allowed to be configured as the redirection port.
Actually, except for port 80, HTTP protocol hardly uses port whose port number is less than
1000. To avoid confliction with well-known TCP ports, it is not recommended to set port with
small port number as the redirection port unless it is necessary.
2. Although port 80 is the default port, it can be deleted by the user. However, as port 80 is a
standard HTTP communication port, you are not advised to delete it.
Configuring Maximum Number of HTTP Sessions of Unauthenticated Users
When an un
authenticated user accesses the network resources, the user’s PC sends out requests for
HTTP session connection. The access device will intercept the HTTP messages and, by means of
redirection, ask the user to go through Web authentication. To prevent an authenticated user initiates too
many HTTP connection requests and save resources on the access device, it is necessary to limit the
maximum number of HTTP sessions initiated by the unauthenticated user on the access device.
Because authentication will take up an HTTP session while other applications of the user may also take
up HTTP sessions, it is not recommended to set the maximum number HTTP sessions of the
authenticated user to be 1. Otherwise, the user web authentication may fail.