authentication event portal-server-down action authorize

Function

The authentication event portal-server-down action authorize command configures network access rights for users when the Portal server is Down.

The undo authentication event portal-server-down action authorize command deletes the network access rights configured for users when the Portal server is Down.

By default, no network access right is configured for users when the Portal server is Down.

Format

authentication event portal-server-down action authorize { service-scheme service-scheme-name | ucl-group ucl-group-name }

undo authentication event portal-server-down action authorize

Parameters

Parameter	Description	Value
service-scheme service-scheme-name	Specifies the name of the service scheme based on which network access rights are assigned to users.	The value must be an existing service scheme name.
ucl-group ucl-group-name	Specifies the name of the UCL group based on which network access rights are assigned to users.	The value must be an existing UCL group name.

Views

Portal access profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If the Portal server is Down, users cannot pass the authentication and thereby have no network access right. Before being successfully authenticated, some users may need certain basic network access rights to download client software and update the antivirus database. The network access rights can be configured for the users when the Portal server is Down, so that the users can access specified network resources.

Prerequisites

A UCL group has been created using the ucl-group command in the system view.

A service scheme has been created using the service-scheme command in the AAA view.

Precautions

This function takes effect only for users who go online after this function is successfully configured.
Only HTTP messages-triggered Portal authentication users support this function.
Before enabling the access device to assign network access rights to users when the Portal server is Down, enable the heartbeat detection function on the Portal server and run the server-detect command on the access device to enable the Portal server detection function.
When the Portal server is in Down state, the redirect ACL function is not supported. For details about this function, see redirect-acl.

Example

# In the Portal access profile p1, configure the device to assign network access rights based on the service scheme s1 to users when the Portal server is Down.

<HUAWEI> system-view
[HUAWEI] aaa
[HUAWEI-aaa] service-scheme s1
[HUAWEI-aaa-service-s1] quit
[HUAWEI-aaa] quit
[HUAWEI] portal-access-profile name p1
[HUAWEI-portal-access-profile-p1] authentication event portal-server-down action authorize service-scheme s1