Figure 417 – H3C Technologies H3C WX3000E Series Wireless Switches User Manual
Page 405
389
Item Description
Method
Specify the portal authentication mode, which can be:
•
Direct—Direct portal authentication.
•
Layer3—Cross-subnet portal authentication.
•
Re DHCP—Re-DHCP portal authentication.
IMPORTANT:
•
In cross-subnet portal authentication mode, Layer 3 forwarding devices are not
required to be present between the authentication client and the access device.
However, if they are present, you must select the cross-subnet portal authentication
mode.
•
In re-DHCP portal authentication mode, a client is allowed to send out packets using
a public IP address before it passes portal authentication. However, responses of the
packets are restricted.
•
If the local portal server is used, you can configure the re-DHCP mode but it does not
take effect.
Auth Network IP
Specify the IP address and mask of the authentication subnet. This field is configurable
when you select the Layer3 mode (cross-subnet portal authentication).
By configuring an authentication subnet, you specify that only HTTP packets from users on
the authentication subnet can trigger portal authentication. If an unauthenticated user is
not on any authentication subnet, the access device discards all the user's HTTP packets
that do not match any portal-free rule.
IMPORTANT:
The authentication subnet in direct mode is any source IP address, and that in re-DHCP
mode is the private subnet to which the interface's private IP address belongs.
Network Mask
Authentication
Domain
Specify the authentication domain for Layer 3 portal users.
After you specify an authentication domain on a Layer 3 interface, the device will use the
authentication domain for authentication, authorization, and accounting (AAA) of the
portal users on the interface, ignoring the domain names carried in the usernames. You
can specify different authentication domains for different interfaces as needed.
The available authentication domains are those specified on the page you enter by
selecting Authentication > AAA from the navigation tree. For more information, see
."
Figure 417 Adding a portal server