135
NOTE:
• Portal authentication configured on MCE devices can also support authentication across VPNs. For
information about MCE, see
Layer 3 - IP Routing Configuration Guide
.
• For information about AAA implementation across VPNs, see the chapter “AAA configuration.”
• This feature is not applicable to VPNs with overlapping address spaces.
Portal configuration task list
Complete these tasks to configure Layer 2 portal authentication:
Task Remarks
Specifying the local portal server for Layer 2 portal authentication Required
Configuring the local portal server
Customizing authentication pages Optional
Configuring the local portal server Required
Enabling Layer 2 portal authentication Required
Controlling access of portal
users
Configuring a portal-free rule
Optional
Setting the maximum number of online portal users
Specifying an authentication domain for portal
users
Enabling support for portal user moving
Specifying an Auth-Fail VLAN for portal authentication Optional
Specifying an auto redirection URL for authenticated portal users Optional
Configuring online Layer 2 portal user detection Optional
Logging off portal users Optional
Complete these tasks to configure Layer 3 portal authentication:
Task Remarks
Specifying a portal server for Layer 3 portal authentication Required
Configuring the local portal server Optional
Enabling Layer 3 portal authentication Required
Controlling access of portal
users
Configuring a portal-free rule
Optional
Configuring an authentication source subnet
Setting the maximum number of online portal users
Specifying an authentication domain for portal users
Configuring Layer 3 portal authentication to support
web proxy
Configuring RADIUS related
attributes
Specifying NAS-Port-Type for an interface
Optional
Specifying a NAS ID profile for an interface
Specifying a source IP address for outgoing portal packets Optional