force-push
Function
The force-push command enables the forcible URL template or URL push function.
The undo force-push command disables the forcible URL template or URL push function.
By default, the forcible URL template or URL push function is disabled.
Parameters
Parameter |
Description |
Value |
|---|---|---|
url-template template-name |
Specifies the name of a pushed URL template. |
The value must be the name of an existing URL template. |
url url-address |
Specifies a pushed URL. |
It is a string of 1 to 200 case-sensitive characters that do not contain spaces and question marks (?). When double quotation marks are used around the string, spaces are allowed in the string. |
Default Level
3: Management level(AAA domain view)
2: Configuration level (authentication profile view)
Usage Guidelines
Usage Scenario
- URL: pushes the URL corresponding to the web page.
- URL template: pushes the URL template. A URL template must be created. The URL template contains the URL of the pushed web page and URL parameters.
Prerequisites
The URL configured using the url (URL template view) command in the URL template view cannot be a redirection URL; otherwise, the command does not take effect.
Precautions
If an application program that actively sends HTTP or HTTPS packets is installed on the user terminal, the terminal has sent the HTTP or HTTPS packet before the user accesses a web page. Therefore, the user is unaware of the web page push process.
For HTTP and HTTPS packets, the forcible push function takes effect only when a redirection ACL is used. If the user table always contains redirection ACLs, a web page is forcibly pushed when HTTPS packets from users match redirection ACL rules. Usually, you can configure the RADIUS server to authorize the Huawei extended RADIUS attribute HW-Redirect-ACL to users for redirection ACL implementation, or run the redirect-acl command to configure a redirection ACL.
A pushed URL configured in a domain need to be used together with a redirect ACL or push flag attribute. The redirect ACL has a higher priority than the push flag attribute. By default, a pushed URL configured in a domain carries the push flag attribute. Users will be redirected to the pushed URL when they are successfully authenticated.
When an IPv4 redirect ACL is configured for an IPv6 user or an IPv6 redirect ACL is configured for an IPv4 user, the Push URL content field in the display access-user command output displays the pushed URL, but the browser of the user cannot redirect to the pushed URL .
The priority of this command in the authentication profile is higher than that in the AAA domain view.
Example
# Push the URL template abc in the domain huawei.
<AC6605> system-view [AC6605] url-template name abc [AC6605-url-template-abc] quit [AC6605] aaa [AC6605-aaa] domain huawei [AC6605-aaa-domain-huawei] force-push url-template abc
# Configure a pushed URL in the authentication profile test.
<AC6605> system-view [AC6605] authentication-profile name test [AC6605-authentication-profile-test] force-push url www.huawei.com
