H3C Technologies H3C SecPath F1000-E - Manual (Page 130)

120
NOTE:
Regardless of whether portal authentication is enabled, you can only add or remove a portal-free rule.
You cannot modify it.
Configuring an authentication source subnet
By configuring authentication source subnets, you specify that only HTTP packets from users on the
authentication source subnets can trigger portal authentication. If an unauthenticated user is not on any
authentication source subnet, the access device discards all the user's HTTP packets that do not match
any portal-free rule.
To configure an authentication source subnet:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Configure an authentication
source subnet.
portal auth-network
network-address { mask-length |
mask }
Optional.
By default, the authentication
source subnet is 0.0.0.0/0, which
means that users from any subnets
must pass portal authentication.
NOTE:
•
Configuration of authentication source subnets applies to only cross-subnet authentication.
• In direct authentication mode, the authentication source subnet is 0.0.0.0/0.
• In re-DHCP authentication mode, the authentication source subnet of an interface is the subnet to which
the private IP address of the interface belongs.
Setting the maximum number of online portal users
You can use this feature to control the total number of online portal users in the system.
To set the maximum number of online portal users allowed in the system:
Step Command Remarks
1. Enter system view. system-view N/A
2. Set the maximum number of
online portal users.
portal max-user max-number
By default, the maximum number of
portal users allowed is 512.
NOTE:
If the number of currently online portal users is larger than the upper limit that you set, the command can
be executed successfully and does not impact the online portal users. However, the system does not allow
new portal users to log on until the number drops down below the limit.