1-7Task RemarksBasic Portal Configuration RequiredConfiguring a Portal-Free Rule OptionalConfiguring an Authentication Subnet OptionalLogging out Users OptionalSpecifying a Mandatory Authentication Domain OptionalBasic Portal ConfigurationConfiguration PrerequisitesThe portal feature provides a solution for user authentication and security authentication. However, theportal feature cannot implement this solution by itself. Currently, RADIUS authentication needs to beconfigured on the access device to cooperate with the portal feature to complete user authentication.The prerequisites for portal authentication are as follows:z The portal-enabled interfaces of the access device are configured with valid IP addresses or haveobtained valid IP addresses through DHCP.z The portal server and the RADIUS server have been installed and configured properly.z With re-DHCP authentication, the invalid IP address check function of DHCP relay is enabled onthe access device, and the DHCP server is installed and configured properly.z With RADIUS authentication, usernames and passwords of the users are configured on theRADIUS server, and the RADIUS client configurations are performed on the access device. Forinformation about RADIUS client configuration, refer to AAA Configuration in the Security Volume.z To implement extended portal functions, you need install and configure the security policy serverand ensure that the ACLs configured on the access device correspond to those specified forrestricted resources and unrestricted resources on the security policy server respectively. Forinformation about security policy server configuration, refer to AAA Configuration in the SecurityVolume.z For configuration about the security policy server, refer to CAMS EAD Security Policy ComponentUser Manual.z The ACL for restricted resources and that for unrestricted resources correspond to isolation ACLand security ACL on the security policy server respectively.z You can modify the authorized ACL on the access device. However, the new ACL takes effect onlyfor portal users logging on after the modification.Configuration ProcedureBasic Portal configurations include configuring the Portal server and enabling Portal on an interface. Toconfigure a portal server, you need to specify the IP address of the portal server on the access device.
