H3C Technologies H3C SecPath F1000-E - Manual (Page 23)

22
State:ONLINE
SubState:NONE
ACL:NONE
Work-mode:stand-alone
MAC IP Vlan Interface
---------------------------------------------------------------------
0015-e9a6-7cfe 2.2.2.2 0 GigabitEthernet0/2
On interface GigabitEthernet0/2:total 1 user(s) matched, 1 listed.
Configuring Re-DHCP Portal Authentication
Network requirements
As shown in Figure 10 :
• The host is directly connected to Device and Device is configured for re-DHCP portal authentication.
The host is assigned with an IP address through the DHCP server. Before passing portal
authentication, the host uses an assigned private IP address. After passing portal authentication, it
can get a public IP address and then the user using the host can access Internet resources.
• A RADIUS server serves as the authentication/accounting server.
Figure 10 Configure re-DHCP portal authentication
192.168.0.111/24
192.168.0.113/24
192.168.0.112/24
Device Host
Automatically obtains
an IP address
GE0/2
20.20.20.1/24
10.0.0.1/24 sub
GE0/1
192.168.0.100/24
Portal server
RADIUS server
DHCP server
Configuration procedure