beautypg.com

Controlling portal user access, Configuring a portal-free rule – H3C Technologies H3C S6300 Series Switches User Manual

Page 113

background image

98

Step Command

Remarks

3.

Reference a portal
Web server for the

interface.

To reference an IPv4 portal Web server:

portal apply web-server server-name
[ fail-permit ]

To reference an IPv6 portal Web server:

portal ipv6 apply web-server server-name
[ fail-permit ]

Reference an IPv4 portal Web
server, an IPv6 portal Web
server, or both for the interface.
By default, the interface does
not reference any portal Web

server.

Controlling portal user access

Configuring a portal-free rule

A portal-free rule allows specified users to access specified external websites without portal
authentication.
The matching items for a portal-free rule include the source/destination IP address, TCP/UDP port

number, source MAC address, access interface, and VLAN. Packets matching a portal-free rule will not

trigger portal authentication, so users sending the packets can directly access the specified external
websites.
You cannot configure two or more portal-free rules with the same filtering criteria. Otherwise, the system

prompts that the rule already exists.
Regardless of whether portal authentication is enabled or not, you can only add or remove a portal-free

rule. You cannot modify it.
To configure an IP-based portal-free rule:

Step Command

Remarks

1.

Enter system view.

system-view

N/A

2.

Configure an
IPv4-based portal-free

rule.

portal free-rule rule-number
{ destination ip { ip-address
{ mask-length | mask } | any } [ tcp

tcp-port-number | udp

udp-port-number ] | source ip
{ ip-address { mask-length | mask } |

any } [ tcp tcp-port-number | udp

udp-port-number ] } *

By default, no IPv4-based portal-free
rule exists.

3.

Configure an
IPv6-based portal-free

rule.

portal free-rule rule-number
{ destination ipv6 { ipv6-address
prefix-length | any } [ tcp

tcp-port-number | udp

udp-port-number ] | source ipv6
{ ipv6-address prefix-length | any } [ tcp

tcp-port-number | udp

udp-port-number ] } *

By default, no IPv6-based portal-free
rule exists.

To configure a source-based portal-free rule: