H3C Technologies H3C SecPath F1000-E - Manual (Page 11)

10
To do… Use the command… Remarks
Configure an authentication subnet
portal auth-network
network-address { mask-length |
mask }
Optional
By default, the authentication
subnet is 0.0.0.0/0, which means
that users from any subnets must
pass portal authentication.
NOTE:
•
Configuration of authentication subnets applies to only cross-subnet authentication.
• In direct authentication mode, the authentication subnet is 0.0.0.0/0.
• In re-DHCP authentication mode, the authentication subnet of an interface is the subnet to which the
private IP address of the interface belongs.
Setting the Maximum Number of Online Portal Users
You can use this feature to control the total number of online portal users in the system.
Follow these steps to set the maximum number of online portal users allowed in the system:
To do… Use the command… Remarks
Enter system view system-view —
Set the maximum number of online
portal users
portal max-user max-number Required
NOTE:
If the maximum number of online portal users specified in the command is less than that of the current
online portal users, the command can be executed successfully and will not impact the online portal users,
but the system will not allow new portal users to log on until the number drops down below the limit.
Specifying the Authentication Domain for Portal Users
After you specify the authentication domain for portal users on an interface, the device will use the
authentication domain for authentication, authorization, and accounting (AAA) of all portal users on the
interface, ignoring the domain names carried in the usernames. Thereby, you can specify different
authentication domains for different interfaces as needed.
Follow these steps to specify the authentication domain for portal users on an interface:
To do… Use the command… Remarks
Enter system view system-view —
Enter interface view
interface interface-type
interface-number
—
Specify the authentication domain
for portal users on the interface
portal domain domain-name
Required
By default, no authentication
domain is specified for portal
users.