3com S7906E 설치 설명서
1-10
z
Configuration of authentication subnets applies to only Layer 3 portal authentication.
z
In direct authentication mode, the authentication subnet is 0.0.0.0/0.
z
In re-DHCP authentication mode, the authentication subnet of an interface is the subnet to which
the private IP address of the interface belongs.
Specifying the Source IP Address for Portal Packets to Be Sent
After you specify the source IP address for portal packets to be sent, the IP address will be used for
packet exchanging between the access device and the portal server.
Follow these steps to specify the source IP address for portal packets to be sent:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Enter interface view
interface interface-type
interface-number
interface-number
—
Specify the source IP address
for portal packets to be sent
for portal packets to be sent
portal nas-ip ip-address
Optional
By default, there is no source IP
address specified for portal
packets and the IP address of
the user login interface will be
used as the source IP address
of the portal packets.
address specified for portal
packets and the IP address of
the user login interface will be
used as the source IP address
of the portal packets.
Logging out Users
Logging out a user terminates the authentication process for the user or removes the user from the
authenticated users list.
Follow these steps to log out users:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Log out users
portal delete-user { ip-address
| all | interface interface-type
interface-number }
| all | interface interface-type
interface-number }
Required
Specifying a Mandatory Authentication Domain
After you specify a mandatory authentication domain for an interface, the device will use the mandatory
authentication domain for authentication, authorization, and accounting (AAA) of the portal users on the
interface, ignoring the domain names carried in the usernames. Thereby, you can specify different
authentication domains for different interfaces as needed.
Follow these steps to specify an authentication domain for an interface: