H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 183)

169
• Specify the IP address and port number of a MAC binding server.
• Enable MAC-triggered authentication on the interface enabled with portal authentication.
• Specify the MAC binding server as a portal server. For configuration information, see " Specifying
a portal server for Layer 3 portal authentication ."
After MAC-triggered authentication takes effect, the access device checks a user's traffic at a specific
interval (specified by the period period-value option). Before the user traffic reaches the threshold
(specified by the threshold threshold-value option), the user can access the external network without
authentication. When the user traffic reaches the threshold, the device performs MAC-triggered
authentication.
To configure MAC-triggered authentication:
Step Command Remarks
1. Enter system view. system-view N/A
2. Specify a MAC binding
server. portal mac-trigger server ip
ip-address [ port port-number ] By default, no MAC binding server
is specified.
3. Enter interface view.
interface interface-type
interface-number
N/A
4. Enable MAC-triggered
authentication.
portal mac-trigger enable [ period
period-value ] [ threshold
threshold-value ]
By default, MAC-triggered
authentication is disabled.
Assiociating an SSID and AP with a portal server
and authentication domain
This feature is supported in Layer 3 portal authentication.
After you associate an SSID and AP wth a portal server and authentication domain, the device looks up
the associations for the SSID and AP the user uses when a wireless user attempts to access external
network. If no match is found, the device uses the portal server specified when portal authentication is
enabled on the user connected interface, and the authentication domain configured in system view.
To make the association effective, make sure the specified portal server and authentication domain
already exist, and configure a portal-free rule so that the portal server can receive the packets from the
device. The AP name configured on the AC must be consistent with the NAS ID or NAS port ID
configured in AP template view or radio view. If you configure both NAS ID and NAS port ID, the AP
name must be consistent with the NAS port ID.
To assiociate an SSID and AP with a portal server and authentication domain:
Step Command Remarks
1. Enter system view. system-view N/A
2. Associate an SSID
and AP name with a
portal server and
authentication
domain.
portal wlan ssid ssid-name [ spot
spot-name ] server server-name [ domain
domain-name ]
By default, an SSID and AP name
are not associated with any portal
server or authentication domain.