Configuring Portal Server Parameters

Context

During Portal authentication, you must configure parameters for the Portal server (for example, the IP address for the Portal server) to ensure smooth communication between the device and the Portal server.

The Portal server is classified as either the external Portal server or the built-in Portal server. The external Portal server has independent hardware, while the built-in Portal server is an entity embedded in the access device (that is, functions of the Portal server are implemented by the access device).

Procedure

Configuring parameters for the external Portal server (binding URL)
1. Run system-view
  The system view is displayed.
2. Run web-auth-server server-name
  A Portal server template is created and the Portal server template view is displayed.
  
  By default, no Portal server template is created.
3. Run server-ip { server-ip-address &<1-10> | ipv6 server-ipv6-address &<1-3> }
  An IP address is configured for the Portal server.
  
  By default, no IP address is configured for the Portal server.
  
  The IP address for the Portal server is the IP address for the external Portal server.
4. Run url url-string
  A URL is configured for the Portal server.
  
  By default, a Portal server does not have a URL.
5. Run shared-key cipher key-string
  The shared key that the device uses to exchange information with the Portal server is configured.
  
  By default, no shared key is configured.
Setting parameters of the URL corresponding to an external Portal server (binding URL template)
1. Configure the URL template.
  1. Run the system-view command to enter the system view.
  2. Run the url-template name template-name command to create a URL template and enter the URL template view.
    By default, no URL template exists on the device.
  3. Run the url [ redirect-only ] url-string command to configure the redirect URL corresponding to the Portal server.
    By default, no redirect URL is configured for the Portal server.
  4. Run the url-parameter { redirect-url redirect-url-value | sysname sysname-value | user-ipaddress user-ipaddress-value | user-mac user-mac-value } ^* command to set the parameters carried in the URL.
    By default, a URL does not carry parameters.
  5. Run the url-parameter mac-address format delimiter delimiter { normal | compact } command to set the MAC address format in the URL.
    By default, the MAC address format in a URL is XXXXXXXXXXXX.
  6. Run the parameter { start-mark parameter-value | assignment-mark parameter-value | isolate-mark parameter-value } ^* command to set the characters in the URL.
    By default, the start character is ?, assignment character is =, and delimiter is &.
  7. Run the quit command to return to the system view.
2. Set parameters for the external Portal server.
  1. Run the web-auth-server server-name command to create a Portal server template and enter the Portal server template view.
    By default, no Portal server template is created.
  2. Run the server-ip { server-ip-address &<1-10> | ipv6 server-ipv6-address &<1-3> } command to set the IP address corresponding to the Portal server.
    By default, no IP address is configured for the Portal server.
  3. Run the url-template url-template [ ciphered-parameter-name ciphered-parameter-name iv-parameter-name iv-parameter-name key cipher key-string ] command to bind a URL template to the Portal server template.
    By default, no URL template is bound to a Portal server template.
    
    The device support encryption of parameter information in the URL template only when it connects to the Huawei Agile Controller-Campus or iMaster NCE-Campus.
  4. Run the shared-key cipher key-string command to configure the shared key that the device uses to exchange information with the Portal server.
    By default, no shared key is configured.
Configuring parameters for the built-in Portal server
1. Run system-view
  The system view is displayed.
2. Run portal local-server ip ip-address
  The IP address is configured for the built-in Portal server.
  
  By default, no IP address is configured for a built-in Portal server.
  
  The IP address for the built-in Portal server is an IP address of a Layer 3 interface that can be reached by a route between the device and the client.
  
  Ensure that a correct URL is entered in HTTPS mode when you use the IP address of a built-in Portal server to access this server. For example, if the IP address of a built-in Portal server is 192.168.12.1, enter https://192.168.12.1.