H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 204)

190
[AC-acl-adv-3000] quit
[AC] acl number 3001
[AC-acl-adv-3001] rule permit ip
[AC-acl-adv-3001] quit
4. Configure extended portal authentication on the AC:
# Configure the portal server as follows:
{
Name: newpt
{
IP address: 192.168.0.111
{
Key: portal
{
Port number: 50100
{
URL: http://192.168.0.111/portal
[AC] portal server newpt ip 192.168.0.111 key portal port 50100
url http://192.168.0.111/portal
# Configure the AC as a DHCP relay agent, and enable the invalid address check function.
[AC] dhcp enable
[AC] dhcp relay server-group 0 ip 192.168.0.112
[AC] interface vlan-interface 100
[AC–Vlan-interface100] ip address 20.20.20.1 255.255.255.0
[AC–Vlan-interface100] ip address 10.0.0.1 255.255.255.0 sub
[AC-Vlan-interface100] dhcp select relay
[AC-Vlan-interface100] dhcp relay server-select 0
[AC-Vlan-interface100] dhcp relay address-check enable
# On the interface connected to the client, specify the authentication domain dm1 for portal users
and enable portal authentication.
[AC–Vlan-interface100] portal domain dm1
[AC–Vlan-interface100] portal server newpt method redhcp
[AC–Vlan-interface100] quit
Configuring portal stateful failover
Network requirements
As shown in Figure 89 , a failover link is present between AC 1 and AC 2. Both AC 1 and AC 2 support
portal authentication. Configure stateful failover between AC 1 and AC 2 to support portal service
backup and use VRRP to implement traffic switchover between the ACs. More specifically,
• When AC 1 operates normally, Host accesses AC 1 for portal authentication before accessing the
Internet; when AC 1 fails, Host accesses the Internet through AC 2. The VRRP uplink/downlink
detection mechanism is used to ensure non-stop traffic forwarding.
• Use the RADIUS server as the authentication/accounting server. In this example, Server takes the
responsibilities of the portal server and the RADIUS server.
• AC 1 and AC 2 use the failover link to transmit stateful failover related packets and specify VLAN
8 on the ACs as the VLAN dedicated for stateful failover related packets.