3com S7906E 설치 설명서
1-17
# Specify that the ISP domain name should not be included in the username sent to the RADIUS server.
[Switch-radius-rs1] user-name-format without-domain
[Switch-radius-rs1] quit
z
Configure an authentication domain
# Create an ISP domain named dm1 and enter its view.
[Switch] domain dm1
# Configure the ISP domain to use RADIUS scheme rs1.
[Switch-isp-dm1] authentication portal radius-scheme rs1
[Switch-isp-dm1] authorization portal radius-scheme rs1
[Switch-isp-dm1] accounting portal radius-scheme rs1
[Switch-isp-dm1] quit
# Configure dm1 as the default ISP domain for all users. Then, if a user enters the username without the
ISP domain at login, the authentication and accounting methods of the default domain will be used for
the user.
[Switch] domain default enable dm1
z
Configure portal authentication
# Configure the portal server as follows:
z
Name: newpt
z
IP address: 192.168.0.111
z
Key: portal
z
Port number: 50100
z
URL: http://192.168.0.111/portal.
[Switch] portal server newpt ip 192.168.0.111 key portal port 50100 url
http://192.168.0.111/portal
# Enable portal authentication on the interface connecting the host.
[Switch] interface vlan-interface 100
[Switch–Vlan-interface100] portal server newpt method direct
[Switch] quit
Configuring Re-DHCP Portal Authentication
Network requirements
z
The host is directly connected to the switch and the switch is configured for re-DHCP
authentication. The host is assigned with an IP address through the DHCP server. Before portal
authentication, the host uses an assigned private IP address. After passing portal authentication, it
can get a public IP address and then users using the host can access unrestricted Internet
resources.
z
A RADIUS server serves as the authentication/accounting server.