H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 178)

164
Step Command
1. Enter system view. system-view
2. Configure a
portal-forbidden rule.
portal forbidden-rule rule-number destination { ip { hostname | ip-address [ mask
{ mask-length | netmask } ] } | { { tcp | udp } port-number } } *
Configuring an authentication source subnet
By configuring authentication source subnets, you specify that only HTTP packets from users on the
authentication source subnets can trigger portal authentication. If an unauthenticated user is not on any
authentication source subnet, the access device discards all the user's HTTP packets that do not match
any portal-free rule.
To configure an authentication source subnet:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Configure an authentication
source subnet.
portal auth-network
network-address { mask-length |
mask }
Optional.
By default, the authentication
source subnet is 0.0.0.0/0, which
means that users from any subnets
must pass portal authentication.
NOTE:
•
Configuration of authentication source subnets applies to only cross-subnet authentication.
• In direct authentication mode, the authentication source subnet is 0.0.0.0/0.
• In re-DHCP authentication mode, the authentication source subnet of an interface is the subnet to which
the private IP address of the interface belongs.
• You can configure up to 32 authentication source subnets by executing the portal auth-network
command repeatedly.
Setting the maximum number of online portal users
You can use this feature to control the total number of online portal users in the system.
If the maximum number of online portal users you have specified in the command is less than that of the
current online portal users, the command can be executed successfully and does not impact the online
portal users. However, the system does not allow new portal users to log on until the number drops down
below the limit.
To set the maximum number of online portal users allowed in the system:
Step Command Remarks
1. Enter system view. system-view N/A