H3C Technologies H3C Intelligent Management Center - Manual (Page 339)

321
{
User Domain—Default domain name of the users accessing through the port group. The portal
server automatically adds the default domain name to a domain-less username for portal
authentication. The value must be the same as what is configured on the portal device for
RADIUS authentication.
{
Port Group Description—Description of the port group.
{
Page Push Policy—Name of the page push policy for the port group. UAM matches each
endpoint user in the port group to the page push policy. If a subpolicy is matched, UAM displays
the authentication page specified in the subpolicy. If none of the subpolicies is matched, UAM
displays the default authentication page. For more information about page push policies, see
"
24 Configuring page push policies ."
{
Client Protection Against Cracks—Indicates whether the client protection against cracks feature
is enabled for endpoint access from the port group. For more information about client protection
against cracks, see " Configuring client anti-crack ."
{
Transparent Authentication on Smart Devices—Indicates whether to allow transparent portal
authentication for device access from the port group. For more information about transparent
portal authentication, see " 15 Configuring transparent portal authentication ."
{
Default Authentication Page—URL of the default authentication page for the port group. UAM
displays the default authentication page when the page push policy is not specified for the port
group or none of the subpolicies in the page push policy is matched.
3. Click Back to return to the Port Group List page.
Adding a port group
1. Access the Port Group List page.
2. Click Add in the Port Group List area.
3. Configure the following parameters on the Add Port Group page:
{
Port Group Name—Enter the port group name. The name must be unique in UAM.
{
Language—Select a language from the list for performing single webpage authentication or
iNode DC authentication for users that access through the port group. The valid option can only
be English.
{
Start Port/End Port—Enter the start and end port numbers. A user can pass portal authentication
only when the port that the user connects to is within the specified port range. The start port
number defaults to 0 and the end port number defaults to zzzzzz. Use the default values if you
have no special requirements. The start/end port format varies with device models. For example,
the start/end port number on the MA5200 is in the format of
hostname-vlan-slot(slot-number)-vlanid(vlan-id)@vlan. For information about setting the start
and end port numbers, see the port number format description in the configuration guide of your
device.
{
To check whether the number of a port connecting to the user belongs to the specified port range,
UAM first pads 0s to the end of the start, end, and current port numbers so that all port numbers
have the same length. For example, with 0s padded, the start port number 0, end port number
zzz, and current port number zzyc change to 0000, zzz0, and zzyc, respectively. Then UAM
compares the port numbers from the highest digit to the lowest in ASCII dictionary order:
− If the port numbers have the same highest digit, UAM compares the second highest digit,
and thus down to the lowest.
− If the highest digit of the current port number is between those of the start and end port
numbers (exclusive), UAM determines that the current port number is within the port range.
If the current port number has the same highest digit as the start or end port number, UAM