143
[Sysname] vlan 5
[Sysname-vlan5] quit
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port link-type hybrid
[Sysname-GigabitEthernet1/0/1] mac-vlan enable
[Sysname-GigabitEthernet1/0/1] portal auth-fail vlan 5
portal auth-network
Syntax
portal auth-network { ipv4-network-address { mask-length | mask } | ipv6 ipv6-network-address
prefix-length }
undo portal auth-network { ipv4-network-address | all | ipv6 ipv6-network-address }
View
Interface view
Default level
2: System level
Parameters
ipv4-network-address: IPv4 address of the authentication source subnet.
mask-length: Length of the subnet mask, in the range of 0 to 32.
mask: Subnet mask, in dotted decimal notation.
ipv6 ipv6-network-address: IPv6 address of the authentication source subnet.
prefix-length: IPv6 address prefix length, in the range of 0 to 128.
all: Specifies all authentication source subnets.
Description
Use the portal auth-network command to configure a portal authentication source subnet on an interface.
You can use this command to configure multiple portal authentication source subnets on an interface.
Then, only HTTP packets from the subnets can trigger portal authentication on the interface. If an
unauthenticated user is not on any authentication source subnet, the access device discards all the user's
HTTP packets that do not match any portal-free rule.
Use the undo portal auth-network command to remove a specific portal authentication source subnet or
all portal authentication subnets.
By default, the portal authentication source IPv4 subnet is 0.0.0.0/0 and source IPv6 subnet is ::/0,
meaning that users in all subnets must pass portal authentication.
This command is only applicable for cross-subnet authentication (layer3). The portal authentication
source subnet for direct authentication (direct) can be any source IP address.
You can configure multiple authentication source subnets by executing the portal auth-network
command repeatedly.
Examples
# Configure a portal authentication source subnet of 10.10.10.0/24 on interface VLAN-interface 2 to
allow users from subnet 10.10.10.0/24 to trigger portal authentication.
<Sysname> system-view
To Next Page
Loading...
Need help?
General