Specifying a portal authentication domain – H3C Technologies H3C S6300 Series Switches User Manual
Page 116
101
If you configure the maximum total number smaller than the number of current online portal users on the
device, this configuration still takes effect. The online users are not affected but the system forbids new
portal users to log in.
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Set the maximum number of
total portal users.
portal max-user max-number
By default, no limit is set on the
number of portal users in the system.
Specifying a portal authentication domain
An authentication domain defines a set of authentication, authorization, and accounting policies. Each
portal user belongs to an authentication domain and is authenticated, authorized, and accounted in the
domain.
After you specify a portal authentication domain on an interface, the device uses the specified
authentication domain for AAA of all portal users on the interface, ignoring the domain names carried
in the usernames. This allows for flexible portal access control.
The device selects the authentication domain for a portal user on an interface in this order:
1.
ISP domain specified for the interface.
2.
ISP domain carried in the username.
3.
System default ISP domain. For information about the default ISP domain, see "
."
You can specify an IPv4 portal authentication domain, an IPv6 portal authentication domain, or both on
an interface.
To specify an IPv4 portal authentication domain:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter interface view.
interface interface-type
interface-number
N/A
3.
Specify an IPv4 portal
authentication domain.
portal domain domain-name
By default, no ISP domain is
specified for IPv4 portal users on
the interface.
To specify an IPv6 portal authentication domain:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter interface view.
interface interface-type interface-number
N/A
3.
Specify an IPv6
portal authentication
domain.
portal ipv6 domain domain-name
By default, no ISP domain is
specified for IPv6 portal users on the
interface.