H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 216)

202
ACL:NONE
Work-mode: primary
MAC IP Vlan Interface
---------------------------------------------------------------------
000d-88f8-0eac 9.9.1.2 10 Vlan-interface10
Total 1 user(s) matched, 1 listed.
[AC2] display portal user all
Index:2
State:ONLINE
SubState:NONE
ACL:NONE
Work-mode: secondary
MAC IP Vlan Interface
---------------------------------------------------------------------
000d-88f8-0eac 9.9.1.2 10 Vlan-interface10
Total 1 user(s) matched, 1 listed.
The output shows that the portal information of the client is stored on both AC 1 and AC 2. The user mode
is primary on AC 1 and secondary on AC 2, indicating that the client logged in from AC 1 and the
client's authentication information has been synchronized to AC 2.
Configuring portal server detection and portal user information
synchronization
Network requirements
As shown in Figure 100 , a wireless client (in VLAN 10) is connected to the access device (AC) and must
pass portal authentication to access the Internet. Use a RADIUS server as the authentication/accounting
server.
Detailed requirements are as follows:
• Configure a public IP address for the client or configure the client to obtain a public IP address from
the DHCP server. Before passing portal authentication, the client can access only the portal server.
After passing portal authentication, the client can access the Internet.
• The access device (AC) can detect whether the portal server is reachable and send trap messages
upon state changes. When the portal server is unreachable due to, for example, a connection
failure, network device failure, or portal server failure, the access device can disable portal
authentication, allowing users to access the Internet without authentication.
• The access device can synchronize portal user information with the portal server periodically.