H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 9)

iii
Guest VLAN ························································································································································· 133
MAC authentication configuration task list ··············································································································· 134
Basic configuration for MAC authentication ············································································································· 134
Configuration prerequisites ································································································································ 134
Configuration procedure ···································································································································· 134
Specifying an authentication domain for MAC authentication users ····································································· 135
Configuring a MAC authentication guest VLAN ······································································································ 136
Configuration prerequisites ································································································································ 136
Configuration guidelines ···································································································································· 136
Configuration procedure ···································································································································· 136
Displaying and maintaining MAC authentication ···································································································· 137
MAC authentication configuration examples ············································································································ 137
Local MAC authentication configuration example··························································································· 137
RADIUS-based MAC authentication configuration example··········································································· 139
ACL assignment configuration example············································································································ 142
Configuring portal authentication ·························································································································· 146
Overview ······································································································································································· 146
Extended portal functions ··································································································································· 146
Portal system components ··································································································································· 146
Portal system using the local portal server ········································································································ 148
Portal authentication modes ······························································································································· 149
Portal support for EAP ········································································································································· 150
Layer 3 portal authentication process ··············································································································· 150
Portal stateful failover ·········································································································································· 154
Portal configuration task list ········································································································································ 156
Configuration prerequisites ········································································································································· 156
Specifying a portal server for Layer 3 portal authentication ··················································································· 157
Configuring the local portal server ···························································································································· 158
Customizing authentication pages ···················································································································· 158
Configuring the local portal server ···················································································································· 161
Enabling Layer 3 portal authentication ······················································································································ 162
Controlling access of portal users ······························································································································ 163
Configuring a portal-free rule····························································································································· 163
Configuring a portal-forbidden rule ·················································································································· 163
Configuring an authentication source subnet ··································································································· 164
Setting the maximum number of online portal users ························································································ 164
Specifying an authentication domain for portal users ····················································································· 165
Configuring Layer 3 portal authentication to support web proxy ·································································· 165
Configuring RADIUS related attributes ······················································································································ 167
Specifying NAS-Port-Type for an interface ······································································································· 167
Specifying a NAS ID profile for an interface ··································································································· 167
Specifying a source IP address for outgoing portal packets ··················································································· 168
Configuring MAC-based quick portal authentication ······························································································ 168
Assiociating an SSID and AP with a portal server and authentication domain ···················································· 169
Configuring portal stateful failover ····························································································································· 170
Specifying an auto redirection URL for authenticated portal users ········································································· 171
Configuring portal detection functions ······················································································································· 172
Configuring online Layer 3 portal user detection ···························································································· 172
Configuring the portal server detection function ······························································································ 173
Configuring portal user information synchronization ······················································································ 174
Logging off portal users ··············································································································································· 175
Enabling logging for portal packets··························································································································· 175
Configuring to carry parameters in the redirection URL ·························································································· 175
Displaying and maintaining portal ···························································································································· 176