H3C S9500E Series Security Configuration Manual

Also see for S9500E Series: Card Manual Command reference Configuration guide Quick start guide Configuration guide

Contents

H3C S9500E Series Security Configuration Manual Manual pdf 10 page image

10Configuring the online user handshake function ········································································································ 78Enabling the multicast trigger function ························································································································· 79Specifying a mandatory authentication domain for a port ······················································································· 79Enabling the quiet timer················································································································································· 80Enabling the re-authentication function ························································································································ 80Configuring a guest VLAN ············································································································································ 80Configuring an Auth-Fail VLAN ···································································································································· 81Displaying and maintaining 802.1X ··························································································································· 82802.1X configuration example ···································································································································· 82Guest VLAN and VLAN assignment configuration example ····················································································· 85MAC authentication configuration ···························································································································· 88MAC authentication overview ······································································································································ 88RADIUS-based MAC authentication ···················································································································· 88Local MAC authentication ···································································································································· 88Related concepts ···························································································································································· 89MAC authentication timers ··································································································································· 89Quiet MAC address ·············································································································································· 89Configuring MAC authentication ································································································································· 89Configuration prerequisites ·································································································································· 89Configuration procedure ······································································································································ 89Displaying and maintaining MAC authentication ······································································································ 90MAC authentication configuration examples ·············································································································· 91Local MAC authentication configuration ············································································································ 91RADIUS-based MAC authentication configuration ···························································································· 92Portal configuration ···················································································································································· 95Introduction to portal ············································································································································· 95Introduction to extended portal functions ············································································································ 95Portal system components ····································································································································· 95Portal authentication mode ··································································································································· 97Portal authentication process ······························································································································· 98Basic portal configuration ············································································································································· 99Configuration prerequisites ·································································································································· 99Configuration procedure ······································································································································ 99Configuring a portal-free rule ····································································································································· 100Configuring an authentication subnet ························································································································ 101Logging out users ························································································································································· 101Specifying a mandatory authentication domain ······································································································· 101Specifying a NAS ID profile for an interface ············································································································ 102Setting the maximum number of online portal users ································································································ 103Displaying and maintaining a portal ························································································································· 103Portal configuration examples ···································································································································· 104Configuring Layer 3 portal authentication ········································································································ 104Configuring Layer 3 portal authentication with extended functions ······························································ 106