143
You can specify different Auth-Fail VLANs for portal authentication on different ports. A port can be
specified with only one Auth-Fail VLAN for portal authentication.
Examples
# Configure VLAN 5 as the Auth-VLAN of portal authentication on port GigabitEthernet 1/0/1, so that
the port will add users failing portal authentication to this VLAN.
<Sysname> system-view
[Sysname] vlan 5
[Sysname-vlan5] quit
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port link-type hybrid
[Sysname-GigabitEthernet1/0/1] mac-vlan enable
[Sysname-GigabitEthernet1/0/1] portal auth-fail vlan 5
portal auth-network (available only on the A5500 EI)
Syntax
portal auth-network network-address { mask-length | mask }
undo portal auth-network { network-address | all }
View
Interface view
Default level
2: System level
Parameters
network-address: Specifies the IP address of the authentication subnet.
mask-length: Specifies the length of the subnet mask, in the range 0 to 32.
mask: Specifies the subnet mask, in dotted decimal notation.
all: Specifies all authentication subnets.
Description
Use the portal auth-network command to configure a portal authentication subnet.
Use the undo portal auth-network command to remove a specified portal authentication subnet or all
portal authentication subnets.
By default, the portal authentication subnet is 0.0.0.0/0, meaning that users in all subnets are to be
authenticated.
This command is only applicable for cross-subnet authentication. The portal authentication subnet for
direct authentication is any source IP address, and the portal authentication subnet for re-DHCP
authentication is the one determined by the private IP address of the interface connecting the users.
Examples
# Configure a portal authentication subnet of 10.10.10.0/24.
<Sysname> system-view
[Sysname] interface vlan-interface 2
[Sysname–Vlan-interface2] portal auth-network 10.10.10.0 24
To Next Page
Loading...
Need help?
General
