HP 3600 v2 Series Configuration Manual page 6

Portal system using the local portal server ········································································································ 124
Portal authentication modes ······························································································································· 125
Portal support for EAP ········································································································································· 126
Layer 2 portal authentication process ··············································································································· 127
Layer 3 portal authentication process ··············································································································· 128
Portal stateful failover ·········································································································································· 131
Portal authentication across VPNs ····················································································································· 133
Portal configuration task list ········································································································································ 133
Configuration prerequisites ········································································································································· 134
Specifying the portal server ········································································································································ 135
Specifying the local portal server for Layer 2 portal authentication ······························································ 135
Specifying a portal server for Layer 3 portal authentication ·········································································· 136
Configuring the local portal server ···························································································································· 136
Customizing authentication pages ···················································································································· 136
Configuring the local portal server ···················································································································· 139
Enabling portal authentication ···································································································································· 140
Enabling Layer 2 portal authentication ············································································································· 140
Enabling Layer 3 portal authentication ············································································································· 141
Controlling access of portal users ······························································································································ 141
Configuring a portal-free rule····························································································································· 141
Configuring an authentication source subnet ··································································································· 143
Setting the maximum number of online portal users ························································································ 143
Specifying an authentication domain for portal users ····················································································· 144
Configuring Layer 2 portal authentication to support Web proxy ································································· 144
Enabling support for portal user moving ·········································································································· 145
Specifying an Auth-Fail VLAN for portal authentication ·························································································· 145
Configuring RADIUS related attributes ······················································································································ 146
Specifying NAS-Port-Type for an interface ······································································································· 146
Specifying a NAS ID profile for an interface ··································································································· 147
Specifying a source IP address for outgoing portal packets ··················································································· 147
Configuring portal stateful failover ····························································································································· 148
Specifying an auto redirection URL for authenticated portal users ········································································· 149
Configuring portal detection functions ······················································································································· 150
Configuring online Layer 2 portal user detection ···························································································· 150
Configuring the portal server detection function ······························································································ 150
Configuring portal user information synchronization ······················································································ 152
Logging off portal users ··············································································································································· 153
Displaying and maintaining portal ···························································································································· 153
Portal configuration examples ···································································································································· 154
Configuring direct portal authentication ··········································································································· 154
Configuring re-DHCP portal authentication ······································································································ 158
Configuring cross-subnet portal authentication ································································································ 160
Configuring direct portal authentication with extended functions·································································· 162
Configuring re-DHCP portal authentication with extended functions ···························································· 164
Configuring cross-subnet portal authentication with extended functions ······················································· 167
Configuring portal stateful failover ···················································································································· 169
Configuring portal server detection and portal user information synchronization ······································· 176
Configuring Layer 2 portal authentication ········································································································ 182
Troubleshooting portal ················································································································································· 185
Inconsistent keys on the access device and the portal server ········································································· 185
Incorrect server port number on the access device ·························································································· 186
Configuring triple authentication ··························································································································· 187
Overview ······································································································································································· 187
Triple authentication mechanism ······················································································································· 187
iv