HP 3600 v2 Series Security Configuration Guide

184
# Configure domain dm1 as the default ISP domain for all users. Then, if a user enters a username
without the ISP domain at logon, the authentication and accounting methods of the default domain are
used for the user.
[Switch] domain default enable dm1
• Configure portal authentication
# Configure a portal server on the switch, making sure that the IP address, port number and URL match
those of the actual portal server.
[Switch] portal server newpt ip 192.168.0.111 key portal port 50100 url
http://192.168.0.111:8080/portal
# Enable portal authentication on the interface connecting the host.
[Switch] interface vlan-interface 100
[Switch–Vlan-interface100] portal server newpt method direct
[Switch–Vlan-interface100] quit
• Configure the portal server detection function
# Configure the access device to detect portal server newpt, specifying the detection method as portal
heartbeat probe, setting the server probe interval to 40 seconds, and specifying the access device to
send a server unreachable trap message and disable portal authentication to permit unauthenticated
portal users if two consecutive probes fail.
[Switch] portal server newpt server-detect method portal-heartbeat action trap permit-all
interval 40 retry 2
NOTE:
The product of interval and retry must be
g
reater than or equal to the portal server heartbeat interval, and
HP recommends configuring the interval as a value greater than the portal server heartbeat interval
configured on the portal server.
• Configure portal user synchronization
# Configure the access device to synchronize portal user information with portal server newpt, setting the
synchronization probe interval to 600 seconds, and specifying the access device to log off users if the
users do not appear in the user synchronization packets sent from the server in two consecutive probe
intervals.
[Switch] portal server newpt user-sync interval 600 retry 2
NOTE:
The product of interval and retry must be
g
reater than or equal to the portal user heartbeat interval, and
HP recommends configuring the interval as a value greater than the portal user heartbeat interval
configured on the portal server.
Verifying the configuration
After the above configurations, you can perform the following command to view information about the
portal server.
<Switch> display portal server newpt
Portal server:
1)newpt:
IP : 192.168.0.111
Key : portal
Port : 50100

HP 3600 v2 Series Specifications

General

Brand	HP
Model	3600 v2 Series
Category	Switch
Language	English