beautypg.com

Configuring portal detection functions, Configuring online detection of portal users, Configuring portal authentication server detection – H3C Technologies H3C S6300 Series Switches User Manual

Page 117

background image

102

Configuring portal detection functions

Configuring online detection of portal users

Configure online detection of portal users on an interface to find abnormal logouts in time.
If a portal user is idle for the specified period of time (idle time), the device sends detection packets to the
user at intervals (interval interval) to identify whether the user is still online.

If the device receives no reply from the user after sending detection packets to the user for the
maximum number of times (retry retries), it considers that the portal user is offline and logs out the

user.

If the device receives a reply, it considers that the portal user is online, and resets the idle timer for
the user. The device repeats the previous procedure to continue detecting the online status of the

user.

IPv4 detection packets can be ARP requests or ICMP requests. IPv6 detection packets can be ND requests

or ICMPv6 requests.
ARP and ND detections apply only to direct and re-DHCP portal authentication. ICMP detection applies

to all portal authentication modes.
To configure online detection of IPv4 portal users:

Step Command

Remarks

1.

Enter system view.

system-view

N/A

2.

Enter interface view.

interface interface-type interface-number

N/A

3.

Configure online
detection of IPv4

portal users.

portal user-detect type { arp | icmp }
[ retry retries ] [ interval interval ] [ idle
time ]

By default, this function is disabled
on the interface.

To configure online detection of IPv6 portal users:

Step Command

Remarks

1.

Enter system view.

system-view

N/A

2.

Enter interface view.

interface interface-type interface-number

N/A

3.

Configure online
detection of IPv6

portal users.

portal ipv6 user-detect type { icmpv6 |
nd } [ retry retries ] [ interval interval ]
[ idle time ]

By default, this function is disabled
on the interface.

Configuring portal authentication server detection

During portal authentication, if the communication between the access device and portal authentication
server is broken, both of the following occur:

New portal users are not able to log in.

The online portal users are not able to log out normally.

To address this problem, the access device needs to be able to detect the reachability changes of the

portal server quickly and take corresponding actions to deal with the changes.