312Step Command Remarks2. Enter interface view. interface interface-type interface-numberThe following types of interfacesare supported:• Layer 3 Ethernet interface.• Layer 3 Ethernetsubinterface.• VLAN interface.• Layer 3 aggregate interface.• Layer 3 aggregatesubinterface.3. Specify a portal Webserver on theinterface.• To specify an IPv4 portal Webserver:portal apply web-serverserver-name [ fail-permit ]• To specify an IPv6 portal Webserver:portal ipv6 apply web-serverserver-name [ fail-permit ]Specify an IPv4 portal Web server,an IPv6 portal Web server, or both.By default, no portal Web serversare specified on an interface.Controlling portal user accessConfiguring a portal-free ruleAbout portal-free rulesA portal-free rule allows specified users to access specified external websites without portalauthentication.The matching items for a portal-free rule include the host name, source/destination IP address,TCP/UDP port number, source MAC address, access interface, and VLAN. Packets matching aportal-free rule will not trigger portal authentication, so users sending the packets can directly accessthe specified external websites.Restrictions and guidelines for configuring a portal-free ruleWhen you configure a portal-free rule, follow these restrictions and guidelines:• If you specify both a VLAN and an interface, the interface must belong to the VLAN. If theinterface does not belong to the VLAN, the portal-free rule does not take effect.• You cannot configure two or more portal-free rules with the same filtering criteria. Otherwise,the system prompts that the rule already exists.• Regardless of whether portal authentication is enabled or not, you can only add or remove aportal-free rule. You cannot modify it.When you configure an IP-based portal-free rule, follow these restrictions and guidelines:• If a portal-enabled interface is enabled with the static individual users feature of IPoE, you mustspecify the source IP address in the portal-free rule. Make sure the specified source IP addressis not the same as any of the trusted source IP addresses for unclassified-IP users. The trustedsource IP addresses for unclassified-IP users are configured by using the ip subscriberunclassified-ip ip match or ipv6 subscriber unclassified-ip ip match command.For more information about the static individual users feature, see "Configuring IPoE." For moreinformation about the ip subscriber unclassified-ip ip match and ipv6 subscriberunclassified-ip ip match commands, see IPoE commands in User Access CommandReference.
