The portal https-redirect whitelist command adds an address to the HTTPS redirection whitelist.
The undo portal https-redirect whitelist command removes an address from the HTTPS redirection whitelist.
By default, no address is added to the HTTPS redirection whitelist.
portal https-redirect whitelist ip start-ip-address [ end-ip-address ]
portal https-redirect whitelist ipv6 start-ipv6-address [ to end-ipv6-address ] (Only the S5720-EI, S5720-HI, S5730-HI, S5731-H, S5731-S, S5731S-H, S5731S-S, S5732-H, S5735-L, S5735S-L, S5735S-L-M, S5735-S, S5735S-S, S5735-S-I, S6720-EI, S6720-HI, S6720S-EI, S6730-H, S6730S-H, S6730-S, and S6730S-S support this command.)
undo portal https-redirect whitelist ip { start-ip-address [ end-ip-address ] | all }
undo portal https-redirect whitelist ipv6 { start-ipv6-address [ to end-ipv6-address ] | all } (Only the S5720-EI, S5720-HI, S5730-HI, S5731-H, S5731-S, S5731S-H, S5731S-S, S5732-H, S5735-L, S5735S-L, S5735S-L-M, S5735-S, S5735S-S, S5735-S-I, S6720-EI, S6720-HI, S6720S-EI, S6730-H, S6730S-H, S6730-S, and S6730S-S support this command.)
Parameter | Description | Value |
---|---|---|
ip start-ip-address [ end-ip-address ] | Specifies an IPv4 address or an IPv4 address range:
|
- |
ipv6 start-ipv6-address [ to end-ipv6-address ] | Specifies an IPv6 address or an IPv6 address range:
|
- |
all | Removes all IPv4 addresses or IPv6 addresses from the HTTPS redirection whitelist. |
- |
Usage Scenario
Before users pass Portal authentication, HTTPS access to a website other than the Portal server triggers HTTPS redirection by default. If an address is added to the HTTPS redirection blacklist by mistake, HTTPS access to this address will not trigger HTTPS redirection. To ensure that HTTPS redirection is performed for HTTPS access to specified addresses, use the portal https-redirect whitelist command to add these addresses to the HTTPS redirection whitelist.
Configuration Impact
If an address has been added to the HTTPS redirection whitelist, this address cannot be added to the HTTPS redirection blacklist using the portal https-redirect blacklist command.
Precautions
If an address in the HTTPS redirection blacklist is added to the HTTPS redirection whitelist, the switch removes the address from the HTTPS redirection blacklist.
If an address (except the address of the Portal server) is not in the HTTPS redirection blacklist, HTTPS access to this address will always trigger HTTPS redirection before users pass Portal authentication.