H3C S5120-EI Series - Configuring an Authentication Subnet; Logging out Users

1-9
z If you specify both a VLAN and an interface in a portal-free rule, the interface must belong to the
VLAN.
z You cannot configure two or more portal-free rules with the same filtering conditions. Otherwise,
the system prompts that the rule already exists.
z No matter whether portal authentication is enabled, you can only add or remove a portal-free rule,
rather than modifying it.
Configuring an Authentication Subnet
By configuring authentication subnets, you specify that only packets from users on the authentication
subnets trigger portal authentication. Packets that are neither from portal-free users nor from
authentication subnets are discarded.
Follow these steps to configure an authentication subnet:
To do… Use the command… Remarks
Enter system view
system-view
—
Enter interface view
interface interface-type
interface-number
—
Configure an
authentication subnet
portal auth-network
network-address
{ mask-length | mask }
Optional
By default, the authentication subnet is
0.0.0.0/0, which means that users with any
source IP addresses are to be
authenticated.
z Configuration of authentication subnets applies to only Layer 3 portal authentication.
z In direct authentication mode, the authentication subnet is 0.0.0.0/0.
z In re-DHCP authentication mode, the authentication subnet of an interface is the subnet to which
the private IP address of the interface belongs.
Logging out Users
Logging out a user terminates the authentication process for the user or removes the user.
Follow these steps to log out users:
To do… Use the command… Remarks
Enter system view
system-view
—
Log out users
portal delete-user { ip-address | all | interface
interface-type interface-number }
Required