Configuration Prerequisites - HP 12500 Series Configuration Manual

Task
users
Configuring RADIUS related
attributes
Specifying a source IP address for outgoing portal packets
Specifying an automatic redirection URL for authenticated portal users
Configuring portal detection
functions
Logging out portal users
Configuring the control mode for portal user packets
Enabling portal user roaming

Configuration prerequisites

The portal feature provides a solution for user authentication and security check. However, the portal
feature cannot implement this solution by itself. RADIUS authentication needs to be configured on the
access device to cooperate with the portal feature to complete user authentication.
The prerequisites for portal authentication are as follows:
The portal server and the RADIUS server have been installed and configured properly.
•
• With re-DHCP authentication, the IP address match check function of DHCP relay agent is enabled
on the access device, and the DHCP server is installed and configured properly.
The portal client, access device, and servers can reach each other.
•
With RADIUS authentication, usernames and passwords of the users are configured on the RADIUS
•
server, and the RADIUS client configurations are performed on the access device. For information
about RADIUS client configuration, see
To implement extended portal functions, you need install and configure the security policy server,
•
IMC EAD, and make sure the ACLs configured on the access device correspond to those specified
for resources in the quarantined area and restricted resources on the security policy server. For
information about security policy server configuration on the access device, see
AAA."
For installation and configuration about the security policy server, see Security Policy Help or IMC EAD
Security Policy Help.
The ACL for resources in the quarantined area and that for restricted resources correspond to the isolation
ACL and the security ACL on the security policy server, respectively.
You can modify the authorized ACL on the access device, but the new ACL takes effect only for portal
users who log on after the modification.
Configuring an authentication subnet
Setting the maximum number of online portal users
Specifying an authentication domain for portal
users
Specifying NAS-Port-Type for an interface
Configuring the portal server detection function
Configuring portal user information
synchronization
"Configuring
109
AAA."
Remarks
Optional.
Optional.
Optional.
Optional.
Optional.
Optional.
Optional.
"Configuring