beautypg.com

Configuration considerations, Configuration procedure – H3C Technologies H3C SecPath F1000-E User Manual

Page 35

background image

34

Figure 15 Network diagram for configuring portal server detection and portal user synchronization

Device

Host

2.2.2.2/24

Gateway : 2.2.2.1/24

GE0/2

2.2.2.1/24

GE0/1
192.168.0.100/24

Portal server

192.168.0.111/24

RADIUS server

192.168.0.112/24

Configuration considerations

Step1

Configure the portal server and enable portal server heartbeat function and the portal user heartbeat
function.

Step2

Configure the RADIUS server to implement authentication and accounting.

Step3

Configure direct portal authentication on interface GigabitEthernet 0/2, which is directly connected with

the host.

Step4

Configure the portal server detection function on the access device, so that the access device can detect

the status of the portal server by cooperating with the portal server heartbeat function.

Step5

Configure the portal user information synchronization function, so that the access device can synchronize

portal user information with the portal server by cooperating with the portal user heartbeat function.

Configuration procedure

NOTE:

Configure IP addresses for the host, Device, and servers as shown in

Figure 15

and ensure that they can

reach each other.

Perform configurations on the RADIUS server to ensure that the user authentication and accounting
functions can work normally.

Step1

Configure the portal server on the iMC

NOTE:

The following describes how to configure the portal server on the iMC. iMC PLAT 3.20-R2602P06 and
iMC UAM 3.60-E6203 are used in this example.

# Configure the portal server.
Log on to the iMC management platform and select the Service tab. Then, select Portal Service
Management
> Server from the navigation tree to enter the portal server configuration page, as
shown in

Figure 16

.

Configure the portal server heartbeat interval and user heartbeat interval.

Input the URL address of the portal authentication main page, in the format of http://ip:port/portal,

where ip and port are those configured during installation of the iMC UAM. Usually, the default
setting of port 8080 is used.