HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

309
problem, the device provides the portal user information synchronization function. This function is
implemented by sending and detecting the portal synchronization packet. The process is as follows:
1. The portal server sends the online user information to the access device in a user
synchronization packet at the user heartbeat interval, which is set on the portal server.
2. Upon receiving the user synchronization packet, the access device checks the user information
carried in the packet with its own. If the device finds a nonexistent user in the packet, it informs
the portal server of the information and the portal server will delete the user. If the device finds
that one of its users does not appear in the user synchronization packets within N consecutive
synchronization probe intervals (N is equal to the value of retries configured in the portal
server user-sync command), it considers that the user does not exist on the portal server and
logs the user off.
To configure the portal user information synchronization function:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Configure the portal
user information
synchronization
function.
portal server
server-name
user-sync
[
interval
interval ]
[
retry
retries ]
Not configured by default.
The portal server specified in the command must
exist. This function can take effect only when the
specified portal server is referenced on the
interface connecting the users.
The user information synchronization function requires that a portal server supports the portal user
heartbeat function. Only the IMC portal server supports the portal user heartbeat function. To
implement the portal user synchronization function, you also need to configure the user heartbeat
function on the portal server and make sure that the product of interval and retry is greater than or
equal to the portal user heartbeat interval. Hewlett Packard Enterprise recommends configuring the
interval to be greater than the portal user heartbeat interval configured on the portal server.
For redundant user information on the device—information for users who are considered nonexistent
on the portal server, the device deletes the information during the (N+1)th interval, where N is equal
to the value of retries configured in the portal server user-sync command.
Logging off portal users
Logging off a user terminates the authentication process for the user or removes the user from the
authenticated users list.
To log off users:
Step Command
1. Enter system view.
system-view
2. Log off users.
portal delete-user
{ ip-address |
all
|
interface
interface-type
interface-number }
Including the MAC address parameter in the
redirection URL
Only Layer 3 portal authentication supports this feature.
Perform this task to configure the device to include the MAC address parameter in the redirection
URL and specify a name for the parameter.

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English