No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

S600-E V200R010C00 Configuration Guide - User Access and Authentication

This document describes the working mechanisms, configuration procedures, and configuration examples of User Access and Authentication features, such as AAA, NAC, and Policy Association.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring Portal Server Parameters

Configuring Portal Server Parameters

Context

During Portal authentication, you must configure parameters for the Portal server (for example, the IP address for the Portal server) to ensure smooth communication between the device and the Portal server.

The Portal server is classified as either the external Portal server or the built-in Portal server. The external Portal server has independent hardware, while the built-in Portal server is an entity embedded in the access device (that is, functions of the Portal server are implemented by the access device).

Procedure

  • Configuring parameters for the external Portal server (binding URL)
    1. Run system-view

      The system view is displayed.

    2. Run web-auth-server server-name

      A Portal server template is created and the Portal server template view is displayed.

      By default, no Portal server template is created.

    3. Run server-ip server-ip-address &<1-10>

      An IP address is configured for the Portal server.

      By default, no IP address is configured for the Portal server.

      NOTE:

      The IP address for the Portal server is the IP address for the external Portal server.

    4. Run url url-string

      A URL is configured for the Portal server.

      By default, a Portal server does not have a URL.

    5. Run shared-key cipher key-string

      The shared key that the device uses to exchange information with the Portal server is configured.

      By default, no shared key is configured.

  • Setting parameters of the URL corresponding to an external Portal server (binding URL template)
    1. Configure the URL template.

      1. Run the system-view command to enter the system view.
      2. Run the url-template name template-name command to create a URL template and enter the URL template view.

        By default, no URL template exists on the device.

      3. Run the url url-string command to configure the redirection URL corresponding to the Portal server.

        By default, no redirection URL is configured for the Portal server.

      4. Run the url-parameter { redirect-url redirect-url-value | sysname sysname-value | user-ipaddress user-ipaddress-value | user-mac user-mac-value } * command to set the parameters carried in the URL.

        By default, a URL does not carry parameters.

      5. Run the url-parameter mac-address format delimiter delimiter { normal | compact } command to set the MAC address format in the URL.

        By default, the MAC address format in a URL is XXXXXXXXXXXX.

      6. Run the parameter { start-mark parameter-value | assignment-mark parameter-value | isolate-mark parameter-value } * command to set the characters in the URL.

        By default, the start character is ?, assignment character is =, and delimiter is &.

      7. Run the quit command to return to the system view.

    2. Set parameters for the external Portal server.

      1. Run the web-auth-server server-name command to create a Portal server template and enter the Portal server template view.

        By default, no Portal server template is created.

      2. Run the server-ip server-ip-address &<1-10> command to set the IP address corresponding to the Portal server.

        By default, no IP address is configured for the Portal server.

      3. Run the url-template url-template [ ciphered-parameter-name ciphered-parameter-name iv-parameter-name iv-parameter-name key cipher key-string ] command to bind a URL template to the Portal server template.

        By default, no URL template is bound to a Portal server template.

        NOTE:

        The device support encryption of parameter information in the URL template only when it connects to the Huawei Agile Controller-Campus.

      4. Run the shared-key cipher key-string command to configure the shared key that the device uses to exchange information with the Portal server.

        By default, no shared key is configured.

  • Configuring parameters for the built-in Portal server
    1. Run system-view

      The system view is displayed.

    2. Run portal local-server ip ip-address

      The IP address is configured for the built-in Portal server.

      By default, no IP address is configured for a built-in Portal server.

      NOTE:

      The IP address for the built-in Portal server is an IP address of a Layer 3 interface that can be reached by a route between the device and the client.

      Ensure that a correct URL is entered in HTTPS mode when you use the IP address of a built-in Portal server to access this server. For example, if the IP address of a built-in Portal server is 192.168.12.1, enter https://192.168.12.1.

Translation
Download
Updated: 2019-08-21

Document ID: EDOC1000141885

Views: 54906

Downloads: 10

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next