HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

302
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Enter interface view.
interface
interface-type
interface-number
N/A
3. Specify an authentication
domain for portal users on
the interface.
portal domain
domain-name
By default, no authentication
domain is specified for portal
users.
The device selects the authentication domain for a portal user on an interface in this order: the
authentication domain specified for the interface, the authentication domain carried in the username,
and the system default authentication domain. For information about the default authentication
domain, see "Configuring AAA."
Configuring Layer 2 portal authentication to support Web
proxy
The following matrix shows the feature and hardware compatibility:
Hardware Feature compatibility
MSR900 No
MSR93X No
MSR20-1X No
MSR20 No
MSR30
Supported only on MIM-FSW modules, MSR30-11E,
and MSR30-11F
MSR50 No
MSR1000 No
By default, proxied HTTP requests cannot trigger Layer 2 portal authentication but are silently
dropped. To allow such HTTP requests to trigger portal authentication, configure the port numbers of
the Web proxy servers on the device.
To configure Layer 2 portal authentication to support a Web proxy:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Add a Web proxy server port
number.
portal web-proxy port
port-number
By default, no Web proxy server
port number is configured and
proxied HTTP requests cannot
trigger portal authentication.
If a user's browser uses the WPAD protocol to discover Web proxy servers, add the port numbers of
the Web proxy servers on the device, and configure portal-free rules to allow user packets destined
for the IP address of the WPAD server to pass without authentication.
You must add the port numbers of the Web proxy servers on the device and users must make sure
their browsers that use a Web proxy server do not use the proxy server for the listening IP address of
the local portal server. Thus, HTTP packets that the portal user sends to the local portal server are
not sent to the Web proxy server.

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English