Portal Authentication-free User and Free IP Address Configuration 277
■ Server2 can access Internet without passing the authentication.
Network diagram
Figure 68 Network diagram for authentication-free user and free IP address configuration
Configuration procedure
n
The following configurations are based on configurations in section “Portal Direct
Authentication Method Configuration Example” “Portal Direct Authentication
Method Configuration Example” and the same configurations are not listed below.
1 Configure authentication-free users
# Configure VLAN4 and enable Portal on the VLAN interface 4
[SW8800] vlan 4
[3Com-vlan4] port ethernet 2/1/4
[3Com-vlan4] quit
[SW8800] interface vlan-interface 4
[3Com-Vlan-interface4] ip address 192.166.1.1 255.255.0.0
[3Com-Vlan-interface4] portal newp
[3Com-Vlan-interface4] quit
# Configure Server1 as an authentication user
[SW8800] portal free-user mac 00E0-FC01-0101 ip 192.166.1.200 vlan
4 interface ethernet 2/1/4
2 Configure free IP addresses
# Add Ethernet2/1/5 into the VLAN2 configured in “Portal Direct Authentication
Method Configuration Example”
[SW8800] vlan 2
[3Com-vlan2] port ethernet 2/1/5
[3Com-vlan2] quit
# Configure Server1 as a free IP address
[SW8800] portal free-ip 192.168.1.300
Switch
User PC
Portal
RADIUS authentication/accounting serve
192.168.1.100/16
192.168.1.200/16
Internal server 1
192.168.1.300/16
192.168.1.300/16
Server2
192.166.1.200/16;MAC:00E0-FC01-0101
Ethernet2/1/4
Vlan-interface 4
192.166.1.1/16
VLAN 2
Vlan-interface 2
192.168.1.160/16
Ethernet2/1/5
Switch
User PC
Portal
RADIUS authentication/accounting serve
192.168.1.100/16
192.168.1.200/16
Switch
User PC
Portal
RADIUS authentication/accounting serve
192.168.1.100/16
192.168.1.200/16
Internal server 1
192.168.1.300/16
Internal server 1
192.168.1.300/16
192.168.1.300/16
Server2
192.166.1.200/16;MAC:00E0-FC01-0101
Ethernet2/1/4
Vlan-interface 4
192.166.1.1/16
VLAN 2
Vlan-interface 2
192.168.1.160/16
Ethernet2/1/5
To Next Page
Loading...
