SGS-6340 Series User Manual

52-141
In the above figure, pc1 is end-user, there is http browser in it, but no 802.1x authentication
client, pc1 wants to access the network through web portal authentication.
Switch1 is the accessing device, it configures accounting server’s address and port as
RADIUS server’s IP and port, and enable the accounting function. Ethernet 1/2 connects to
pc1, the port enables web portal authentication, and configure the redirection address and port
as portal server’s IP and port, so ethernet 1/2 forbids all flows except dhcp/dns/arp packets.
Switch2 is the aggregation switch. Ethernet1/2 connects to radius server while ethernet1/3
connects to portal server. The address of radius server is 192.168.40.100 while the address of
portal server is 192.168.40.99. Ethernet1/4 connects to DHCP server while ethernet1/5
connects to DNS server. Ethernet1/6 is trunk port and connects to ethernet1/4 of switch1.
The configuration of the common web portal authentication is as follows:
Switch(config)#interface vlan 1
Switch(config-if-vlan1)#ip address 192.168.40.50 255.255.255.0
Switch(config)#webportal enable
Switch(config)#webportal nas-ip 192.168.40.50
Switch(config)#webportal redirect 192.168.40.99
Switch(config)#interface ethernet 1/3
Switch(config-if-ethernet1/3)#webportal enable
Web portal authentication associates with DHCP snooping binding to use, the configuration is
as follows:
Switch(config)#ip dhcp snooping enable
Switch(config)#ip dhcp snooping binding enable
Switch(config)#interface ethernet 1/2
Switch(config-if-ethernet1/2)#webportal enable
Switch(config-if-ethernet1/2)#ip dhcp snooping binding webportal
52.4 Web Portal Authentication Troubleshooting
When using web portal authentication, the system will show the detailed prompt information if
the operation is wrong.
Web portal authentication is disabled by default. After ensure the configuration is correct, use
debug command and show command to check the relative information, if you can not
determine the cause of the problem, please send the recorded message to technical server
center of our company.