105
Ste
Command
Remarks
3. Enable portal
fail-permit for a portal
authentication server.
portal [ ipv6 ] fail-permit server
server-name
By default, portal fail-permit is
disabled for a portal
authentication server.
4. Enable portal
fail-permit for a portal
Web server.
portal [ ipv6 ] apply web-server
server-name fail-permit
By default, portal fail-permit is
disabled for a portal Web server.
Configuring BAS-IP for unsolicited portal packets
sent to the portal authentication server
If the device runs Portal 2.0, the unsolicited packets sent to the portal authentication server must carry the
BAS-IP attribute. If the device runs Portal 3.0, the unsolicited packets sent to the portal authentication
server must carry the BAS-IP or BAS-IPv6 attribute.
If IPv4 portal authentication is enabled on an interface, you can configure the BAS-IP attribute on the
interface. If IPv6 portal authentication is enabled on an interface, you can configure the BAS-IPv6
attribute on the interface.
If you configure the BAS-IP or BAS-IPv6 attribute on an interface, the device uses the configured BAS-IP
or BAS-IPv6 address as the source IP address of the portal notifications sent from the interface to the
portal authentication server. Otherwise, the source IP address is the IP address of the interface.
During a re-DHCP portal authentication or mandatory user logout process, the device sends portal
notification packets to the portal authentication server. For the authentication or logout process to
complete, make sure the BAS-IP/BAS-IPv6 attribute is the same as the device IP or IPv4 address specified
on the portal authentication server.
To configure the BAS-IP attribute for unsolicited portal packets sent to the portal authentication server:
Ste
Command
Remarks
1. Enter system view.
system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Configure BAS-IP for IPv4
portal packets sent to the
portal authentication
server.
portal bas-ip ipv4-address
By default, the BAS-IP attribute of an IPv4
portal response packet sent to the portal
authentication server is the source IPv4
address of the packet, and that of an IPv4
portal notification packet is the IPv4
address of the interface.
4. Configure BAS-IPv6 for
IPv6 portal packets sent to
the portal authentication
server.
portal bas-ipv6 ipv6-address
By default, the BAS-IPv6 attribute of an
IPv6 portal response packet sent to the
portal authentication server is the source
IPv6 address of the packet, and that of an
IPv6 portal notification packet is the IPv6
address of the interface.