H3C Technologies H3C SecPath F1000-E - Manual (Page 8)

iii
Configuring ASPF ························································································································································· 103
ASPF configuration example ······································································································································· 104
Configuring connection limits ································································································································· 106
Overview ······································································································································································· 106
Configuring connection limit in the Web interface ·································································································· 106
Configuring connection limit at the CLI ······················································································································ 108
Connection limit configuration task list ············································································································· 108
Creating a connection limit policy ····················································································································· 108
Configuring the connection limit policy ············································································································ 108
Applying the connection limit policy ················································································································· 109
Displaying and maintaining connection limit policies ····················································································· 109
Connection limit configuration example ··········································································································· 109
Troubleshooting connection limit ······················································································································· 111
Configuring portal authentication ·························································································································· 112
Feature and hardware compatibility ·························································································································· 112
Overview ······································································································································································· 112
Extended portal functions ··································································································································· 112
Portal system components ··································································································································· 112
Portal authentication mode ································································································································· 114
Layer 3 portal authentication process ··············································································································· 115
Portal configuration task list ········································································································································ 117
Configuration prerequisites ········································································································································· 117
Specifying a portal server for Layer 3 portal authentication ··················································································· 118
Enabling Layer 3 portal authentication ······················································································································ 118
Controlling access of portal users ······························································································································ 119
Configuring a portal-free rule····························································································································· 119
Configuring an authentication source subnet ··································································································· 120
Setting the maximum number of online portal users ························································································ 120
Specifying the authentication domain for portal users ···················································································· 121
Configuring RADIUS related attributes ······················································································································ 121
Specifying NAS-Port-Type for an interface ······································································································· 121
Specifying a NAS ID profile for an interface ··································································································· 121
Specifying a source IP address for outgoing portal packets ··················································································· 122
Specifying an auto redirection URL for authenticated portal users ········································································· 123
Configuring portal detection functions ······················································································································· 123
Configuring online Layer 3 portal user detection ···························································································· 123
Configuring the portal server detection function ······························································································ 124
Configuring portal user information synchronization ······················································································ 125
Logging off portal users ··············································································································································· 126
Displaying and maintaining portal ···························································································································· 126
Portal configuration examples ···································································································································· 127
Configuring direct portal authentication ··········································································································· 127
Configuring re-DHCP portal authentication ······································································································ 132
Configuring cross-subnet portal authentication ································································································ 134
Configuring direct portal authentication with extended functions·································································· 136
Configuring re-DHCP portal authentication with extended functions ···························································· 138
Configuring cross-subnet portal authentication with extended functions ······················································· 140
Configuring portal server detection and portal user information synchronization ······································· 142
Troubleshooting portal ················································································································································· 148
Inconsistent keys on the access device and the portal server ········································································· 148
Incorrect server port number on the access device ·························································································· 148
Configuring AAA ···················································································································································· 149
Feature and hardware compatibility ·························································································································· 149