HP 5500 Ei 5500 Si Switch Series Configuration Guide

 156 
Step Command Remarks 
3.  Specify the portal group to 
which the portal service 
backup interface belongs.  portal backup-group group-id
 By default, the portal service 
backup interface does not belong 
to any portal group. 
The portal service backup 
interfaces on the two devices for 
stateful failover must belong to the 
same portal group. 
4.
  Return to system view. 
quit  N/A 
5.  Specify the device ID in 
stateful failover mode.  nas device-id 
device-id  By default, the device operates in...

 157 
Follow these guidelines to specify an auto redirection URL for authenticated portal users: 
•  To use this feature for remote Layer 3 portal authen tication, the portal server must be the IMC portal 
server that supports the page auto-redirection function. 
•   The  wait-time  period  option is effective to only local portal authentication. 
•   When no auto redirection URL is specified for auth enticated portal users, an authenticated user is 
usually redirected to the URL the user typed in the...

 158 
During portal authentication, if the communication between the access device and portal server is 
broken, new portal users are not able to log on and the online portal users are not able to log off normally. 
To address this problem, the access device must be able to detect the reachability changes of the portal 
server quickly and take corresponding actions to deal with the changes. For example, after the access 
device detects that the portal server is unreachable,  it allows portal users to...

 159 
•  The detection function configured for a portal server takes effect on an interface only after you 
enable portal authentication and referenc e the portal server on the interface.  
To configure the portal server detection function: 
 
Step Command Remarks 
1.   Enter system view. 
system-view  N/A 
2.  Configure the portal server 
detection function.  portal server 
server-name 
server-detect method {  http | 
portal-heartbeat  } * action  { log | 
permit-all  | trap  } * [  interval  
interval...

 160 
The user information synchronization function requires that a portal server supports the portal user 
heartbeat function. Only the IMC portal server supports the portal user heartbeat function. To implement 
the portal user synchronization function, you also need to configure the user heartbeat function on the 
portal server and make sure the product of interval and retry is greater than or equal to the portal user 
heartbeat interval. HP recommends that you configure the  interval to be greater...

 161 
Task Command Remarks 
Display information about a 
specific portal server or all portal 
servers (available only on the HP 
5500 EI series). display portal server 
[ server-name 
] [ | { begin | 
exclude  | include  } 
regular-expression  ]   Available in any view
 
Display portal server statistics on a 
specific interface or all interfaces 
(available only on the HP 5500 EI 
series).  display portal server statistics
 { all 
|  interface  interface-type 
interface-number  } [ | { begin  | 
exclude...

 162 
Figure 60 Network diagram 
 
 
Configure IP addresses for the host, switch, and servers as shown in  Figure 60 and mak e sure that they 
can reach each other. 
Configure the RADIUS server properly to provide authentication and accounting functions for users. 
Configuring the portal server (IMC PLAT 5.0) 
This example assumes that the portal server runs on IMC PLAT 5.0(E0101) and IMC UAM 5.0(E0101). 
# Configure the portal server. 
Log in to IMC and select the  Service tab. Then, select  User Access...

 163 
Select User Access Manager  > Portal Service Management  > IP Group from the navigation tree to enter 
the portal IP address group configuration page. Then, click  Add to enter the page shown in  Figure 62.  
•   Enter the I

P group name. 
•   Enter the start IP address and end IP address of the IP group. Make sure that the host IP address is 
in the IP group. 
•   Select a service group. By default, the group  Ungrouped is used. 
•   Select the IP group type  Normal. 
Figure 62  Adding an IP...

 164 
Figure 63 Adding a portal device 
 
 
# Associate the portal device with the IP address group. 
As shown in Figure 64, c
lick the icon in the  Port Group Information Management  column of device NAS 
to enter the port group configuration page.  
Figure 64  Device list 
 
 
On the port group configuration page, click Add to enter the page shown in  Figure 65. P erform the 
following configurations: 
•   Enter the port group name. 
•   Select the configured IP address group. The IP address used by...

 165 
Figure 65 Adding a port group 
 
 
# Select User Access Manager  > Service Parameters  > Validate System Configuration  from the 
navigation tree to validate the configurations. 
Configuring the switch 
1.  Configure a RADIUS scheme: 
# Create a RADIUS scheme named  rs1 and enter its view.  
 system-view 
[Switch] radius scheme rs1 
# Set the server type for the RADIUS scheme. When  using the IMC server, set the server type to 
extended .  
[Switch-radius-rs1] server-type extended 
# Specify the...