Portal Configuration Examples (on Routers) 1861Portal ConfigurationExamples (on Routers)Portal DirectAuthenticationConfiguration ExamplesNetwork requirements■ The router is configured with direct portal authentication. Before portalauthentication, users can access only the portal server. After passing the portalauthentication, they can access external networks.■ A RADIUS server serves as the authentication/accounting server.Network diagramFigure 539 Network diagram for direct authentication (on a router)Configuration proceduren IP addresses are configured for devices as required and routes are availablebetween devices before the portal feature is enabled.Configure the access device:1 Configure a RADIUS scheme# Create a RADIUS scheme named “rs1” and enter its view. system-view[Router] radius scheme rs1# Set the server type to “extended”.[Router-radius-rs1] server-type extended# Configure the primary authentication server, the primary accounting server, andthe keys for both servers to communicate.Clear the portal server statistics onthe specified interface or allinterfacesreset portal server statistics { all |interface interface-typeinterface-number }Available in userviewClear TCP spoofing statistics reset portal tcp-cheat statistics Available in userviewTo do... Use the command... RemarksRouterHost2.2.2 .2/24Gateway : 2.2.2.1 /24Eth1/02.2.2.1 /24Eth1/1192 .168 .0.100 /24Portal server192.168 .0.111 /24RADIUS server192 .168.0.112 /24
