3com 8807 User Guide

■

Server2 can access Internet without passing the authentication.

Figure 68   Network diagram for authentication-free user and free IP address configuration

n 

The following configurations are based on configurations in section “Portal Direct 
Authentication Method Configuration Example” “Portal Direct Authentication 
Method Configuration Example” and the same configurations are not listed below.

1 Configure authentication-free users

# Configure VLAN4 and enable Portal on the VLAN interface 4

[SW8800] vlan 4

 

[3Com-vlan4] port ethernet 2/1/4

 

[3Com-vlan4] quit

 

[SW8800] interface vlan-interface 4

 

[3Com-Vlan-interface4] ip address 192.166.1.1 255.255.0.0

 

[3Com-Vlan-interface4] portal newp

 

[3Com-Vlan-interface4] quit 

# Configure Server1 as an authentication user

[SW8800] portal free-user mac 00E0-FC01-0101 ip 192.166.1.200 vlan 

 

4 interface ethernet 2/1/4 

2 Configure free IP addresses

# Add Ethernet2/1/5 into the VLAN2 configured in “Portal Direct Authentication 
Method Configuration Example”

[SW8800] vlan 2

 

[3Com-vlan2] port ethernet 2/1/5

 

[3Com-vlan2] quit 

# Configure Server1 as a free IP address

[SW8800] portal free-ip 192.168.1.300 

Switch

User PC

Portal

RADIUS authentication/accounting server

192.168.1.100/16

192.168.1.200/16

Internal server 1

192.168.1.300/16

192.168.1.300/16

Server2

192.166.1.200/16;MAC:00E0-FC01-0101

Ethernet2/1/4 Vlan-interface 4

192.166.1.1/16

VLAN 2

Vlan-interface 2

192.168.1.160/16

Ethernet2/1/5

Switch

User PC

Portal

RADIUS authentication/accounting server

192.168.1.100/16

192.168.1.200/16

Switch

User PC

Portal

RADIUS authentication/accounting server

192.168.1.100/16

192.168.1.200/16

Internal server 1

192.168.1.300/16

Internal server 1

192.168.1.300/16

192.168.1.300/16

Server2

192.166.1.200/16;MAC:00E0-FC01-0101

Ethernet2/1/4 Vlan-interface 4

192.166.1.1/16

VLAN 2

Vlan-interface 2

192.168.1.160/16

Ethernet2/1/5