Table of Contents
If you specify both a VLAN and an interface in a portal-free rule, the interface must belong to the
VLAN.
You cannot configure two or more portal-free rules with the same filtering conditions. Otherwise,
the system prompts that the rule already exists.
No matter whether portal authentication is enabled, you can only add or remove a portal-free rule,
rather than modifying it.
Configuring an Authentication Subnet
By configuring authentication subnets, you specify that only packets from users on the authentication
subnets trigger portal authentication. Packets that are neither from portal-free users nor from
authentication subnets are discarded.
Follow these steps to configure an authentication subnet:
To do...
Enter system view
Enter interface view
Configure an
authentication subnet
Configuration of authentication subnets applies to only Layer 3 portal authentication.
In direct authentication mode, the authentication subnet is 0.0.0.0/0.
In re-DHCP authentication mode, the authentication subnet of an interface is the subnet to which
the private IP address of the interface belongs.
Logging out Users
Logging out a user terminates the authentication process for the user or removes the user.
Follow these steps to log out users:
To do...
Enter system view
Log out users
Use the command...
system-view
interface interface-type
interface-number
portal auth-network
network-address
{ mask-length | mask }
Use the command...
system-view
portal delete-user { ip-address | all | interface
interface-type interface-number }
1-9
Remarks
—
—
Optional
By default, the authentication subnet is
0.0.0.0/0, which means that users with any
source IP addresses are to be
authenticated.
Remarks
—
Required
Chapters
Table of Contents
Troubleshooting
