177
portal layer3 source
Use portal layer3 source to configure an IPv4 portal authentication source subnet on an interface.
Use undo portal layer3 source to delete IPv4 portal authentication source subnets.
Syntax
portal layer3 source ipv4-network-address { mask-length | mask }
undo portal layer3 source [ ipv4-network-address ]
Default
No IPv4 portal authentication source subnet is configured on the interface. Portal users from any IPv4
subnet must pass portal authentication.
Views
Interface view
Predefined user roles
network-admin
Parameters
ipv4-network-address: Specifies an IPv4 portal authentication source subnet address.
mask-length: Specifies the subnet mask length of the IPv4 address, in the range of 0 to 32.
mask: Specifies the subnet mask in dotted decimal format.
Usage guidelines
With IPv4 authentication source subnets configured, only packets from IPv4 users on the authentication
source subnets can trigger portal authentication. If an unauthenticated IPv4 user is not on any
authentication source subnet, the access device discards all the user's packets that do not match any
portal-free rule.
If you do not specify the ipv4-network-address argument in the undo portal layer3 source command, this
command deletes all IPv4 portal authentication source subnets on the interface.
Only cross-subnet authentication supports authentication source subnets.
If you configure both an authentication source subnet and an authentication destination subnet on an
interface, only the authentication destination subnet takes effect.
Examples
# Configure an IPv4 portal authentication source subnet of 10.10.10.0/24 on interface GigabitEthernet
2/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/1
[Sysname–GigabitEthernet2/1/1] portal layer3 source 10.10.10.0 24
Related commands
• display portal interface
• portal free-all except destination
To Next Page
Loading...
Need help?
General
