146
Before specifying an Auth-Fail VLAN, be sure to create the VLAN.
To specify an Auth-Fail VLAN for portal authentication:
Ste
Command
Remarks
1. Enter system view.
system-view N/A
2. Enter Layer 2 Ethernet
interface view.
interface interface-type
interface-number
N/A
3. Specify an Auth-Fail VLAN for
portal authentication on the
port.
portal auth-fail vlan authfail-vlan-id
Not specified by default
After you specify an Auth-Fail VLAN for portal authentication on a port, you must also enable the
MAC-based VLAN function on the port to make the specified Auth-Fail VLAN take effect. For information
about MAC VLAN, see Layer 2—LAN Switching Configuration Guide.
The MAC-VLAN entries generated in response to portal authentication failures do not overwrite the
MAC-VLAN entries already generated in other authentication modes.
Configuring RADIUS related attributes
Only Layer 3 portal authentication supports this feature.
Specifying NAS-Port-Type for an interface
NAS-Port-Type is a standard RADIUS attribute for indicating a user access port type. With this attribute
specified on an interface, when a portal user logs on from the interface, the device uses the specified
NAS-Port-Type value as that in the RADIUS request to be sent to the RADIUS server. If NAS-Port-Type is not
specified, the device uses the access port type obtained.
If there are multiple network devices between the Broadband Access Server (BAS, the portal
authentication access device) and a portal client, the BAS may not be able to obtain a user's correct
access port information. For example, for a wireless client using portal authentication, the access port
type obtained by the BAS may be the type of the wired port that authenticates the user. To make sure that
the BAS delivers the right access port information to the RADIUS server, specify the NAS-Port-Type
according to the practical access environment.
To specify the NAS-Port-Type value for an interface:
Ste
Command
Remarks
1. Enter system view.
system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Specify the NAS-Port-Type
value for the interface.
portal nas-port-type { ethernet |
wireless }
Not configured by default