Huawei Quidway S3500 Series - Page 498

Operation Manual - Security
Quidway S3500 Series Ethernet Switches Chapter 2 Portal Configuration
Huawei Technologies Proprietary
2-13
II. Network diagram
Switch
User PC
Portal server
RADIUS
192.168.1.100/16
192.168.1.200/16
Internal server1
192.168.1.300/16
Server2
192.166.1.200/16;MAC:00E0-FC01-0101
Ethernet0/4
Vlan-interface 4
192.166.1.1/16
VLAN 2
Vlan-interface 2
192.168.1.160/16
Ethernet0/5
Switch
User PC
Portal server
RADIUS
192.168.1.100/16
192.168.1.200/16
Switch
User PC
Portal server
RADIUS authentication/accounting server
192.168.1.100/16
192.168.1.200/16
Internal server1
192.168.1.300/16
Internal server1
192.168.1.300/16
Server2
192.166.1.200/16;MAC:00E0-FC01-0101-
Ethernet0/4
Vlan-interface 4
192.166.1.1/16
VLAN 2
Vlan-interface 2
192.168.1.160/16
Ethernet0/5
Switch
User PC
Portal server
RADIUS
192.168.1.100/16
192.168.1.200/16
Switch
User PC
Portal server
RADIUS
192.168.1.100/16
192.168.1.200/16
Internal server1
192.168.1.300/16
Internal server1
192.168.1.300/16
Server2
192.166.1.200/16;MAC:00E0-FC01-0101
Ethernet0/4
Vlan-interface 4
192.166.1.1/16
VLAN 2
Vlan-interface 2
192.168.1.160/16
Ethernet0/5
Switch
User PC
Portal server
RADIUS
192.168.1.100/16
192.168.1.200/16
Server2
192.166.1.200/16;MAC:00E0-FC01-0101
Ethernet0/4
Vlan-interface 4
192.166.1.1/16
VLAN 2
Vlan-interface 2
192.168.1.160/16
Ethernet0/5
Switch
User PC
Portal server
RADIUS
192.168.1.100/16
192.168.1.200/16
Switch
User PC
Portal server
RADIUS authentication/accounting server
192.168.1.100/16
192.168.1.200/16
Switch
User PC
Portal server
RADIUS authentication/accounting server
192.168.1.100/16
192.168.1.200/16
Internal server1
192.168.1.300/16
Internal server1
192.168.1.300/16
Internal server1
192.168.1.300/16
Server2
192.166.1.200/16;MAC:00E0-FC01-0101-
Ethernet0/4
Vlan-interface 4
192.166.1.1/16
VLAN 2
Vlan-interface 2
192.168.1.160/16
Ethernet0/5
Figure 2-5 Network diagram for authentication-free users and free IP addresses
III. Configuration procedure
 Note:
Because the following configuration is based on the configurations in section 2.2.3 ,
the same configurations are not described here.
1) Configure authentication-free users
# Configure VLAN 4, and enable Portal on VLAN interface 4.
[Quidway] vlan 4
[Quidway-vlan4] port ethernet 0/4
[Quidway-vlan4] quit
[Quidway] interface vlan-interface 4
[Quidway-Vlan-interface4] ip address 192.166.1.1 255.255.0.0
[Quidway-Vlan-interface4] portal newp
[Quidway-Vlan-interface4] quit
# Configure Server1 as an authentication-free user.
[Quidway] portal free-user mac 00E0-FC01-0101 ip 192.166.1.200 vlan 4 interface
ethernet 0/4
2) Configure free IP
# Add ethernet 0/5 port to the VLAN 2 configured in section 2.2.3 .
[Quidway] vlan 2