H3C Technologies H3C Intelligent Management Center - Manual (Page 343)

325
• Its MAC address is the same as that in the portal-free rule.
To configure a portal-free rule:
1. To add a portal-free rule, click Add in the Portal-Free Rule area to configure the following
parameters:
{
No.—Enter the number of the portal-free rule.
The value range depends on the device mode (see the relevant configuration guide).
{
Interface—Select Any or an interface on the portal device from the list.
{
VLAN ID—Enter a VLAN ID. Leaving this field blank indicates any VLAN. If you select an
interface, you must enter the VLAN ID to which the interface belongs or leave this field blank. If
you select Any for Interface, HP recommends that you leave this field blank.
{
Source IP/Mask—Enter the source IP address and mask, which define a source IP address range.
Any means any source IP address.
{
Source MAC—Enter a MAC address, in the format of HH-HH-HH-HH-HH-HH or
HHHH-HHHH-HHHH. Leaving this field blank indicates any MAC address. If both Source
IP/Mask and Source MAC need to be configured, the mask must be configured as
255.255.255.255. Otherwise, the source MAC address is invalid. If you use Any for Source
IP/Mask, HP recommends that you leave this field blank.
{
Destination IP/Mask—Enter the destination IP address and mask, which define a destination IP
address range. Any means any destination IP address.
2. Click OK.
3. Repeat steps 1 and 2 to add more portal-free rules.
4. To delete a portal-free rule, click the Delete icon for it.
Portal Authentication Port
This list contains all Layer 3 interfaces configured with IP addresses. Information includes the port
description, IP address, whether portal authentication is enabled, whether transparent portal
authentication is enabled, and source authentication network.
To configure a portal authentication port:
1. Select the portal authentication port.
2. Enable or disable portal authentication on this port in the Authentication Status column.
3. In the Source Authentication Network text box, enter the source IP address and mask, which define
a source IP address range.
An endpoint user connecting to this port can pass portal authentication only if it belongs to this
source IP address range. You can use dotted decimal notation or mask length to indicate the mask.
This parameter needs to be configured only when Layer 3 is selected for Access Method. You can
configure only one source IP address range in one line and a maximum of 32 source IP address
ranges in total.
4. Repeat steps 1 to 3 to configure more portal authentication ports.
Parameters for Comware V3 switches and routers
Differences from Comware V5 devices
• Comware V3 devices do not support postauthentication redirection or portal-free rules, so
Postauthentication Redirect URL and Portal-Free Rule are not needed.