portal local-server

Function

The portal local-server command enables the built-in Portal server function.

The undo portal local-server command disables the built-in Portal server function.

By default, the built-in Portal server function is disabled.

Format

portal local-server https ssl-policy policy-name [ port port-num ]

undo portal local-server https

Parameters

Parameter	Description	Value
https	Configures the built-in Portal server to use HTTPS to exchange authentication information with users.	-
ssl-policy policy-name	Specifies the SSL policy used by the built-in Portal server. NOTE: policy-name indicates an existing SSL policy.	The value of policy-name is a string of 1 to 23 case-sensitive characters without spaces.
port port-num	Specifies the TCP port number used by HTTPS. The default port number is used if the parameter is not specified.	The value is an integer that ranges from 443 or 1025 to 55535. The default port number is 443.

Parameter

Description

Value

https

Configures the built-in Portal server to use HTTPS to exchange authentication information with users.

ssl-policy policy-name

Specifies the SSL policy used by the built-in Portal server.

NOTE:

policy-name indicates an existing SSL policy.

The value of policy-name is a string of 1 to 23 case-sensitive characters without spaces.

port port-num

Specifies the TCP port number used by HTTPS.

The default port number is used if the parameter is not specified.

The value is an integer that ranges from 443 or 1025 to 55535.

The default port number is 443.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Compared with the external Portal server, the built-in Portal server is easy to use, cost-effective, and easy to maintain. After the built-in Portal server is configured, the external Portal authentication server is not required. When you run the portal local-server command to enable the built-in Portal server function, configure the built-in Portal server to use HTTPS to exchange authentication information with users. HTTPS is a combination of the HTTP and Secure Sockets Layer (SSL) protocols. If the built-in Portal server is configured to use HTTPS to exchange authentication information with users, an SSL policy must be configured and the digital certificate must be loaded.

You can run the portal local-server enable command to enable the Portal authentication function on the interface only after the built-in Portal server function is enabled.

Prerequisites

The IP address for the built-in Portal server has been configured using the portal local-server ip command.
An SSL policy has been created using the ssl policy policy-name command in the system view and the digital certificate has been loaded using the certificate load command in the SSL policy view.
Apply to a trusted certificate authority for the certificate that needs to be loaded for the SSL policy.

Precautions

When there are online Portal authentication users, the built-in Portal server function cannot be disabled globally and the SSL policy of the built-in Portal server cannot be modified.
The SSL policy referenced by the built-in Portal server cannot be deleted.
After the built-in Portal server function is enabled globally, the guest VLAN, critical VLAN, or restrict VLAN cannot be created.

Example

# Enable the built-in Portal server function and set the SSL policy used by the built-in Portal server to abc.

<HUAWEI> system-view
[HUAWEI] portal local-server https ssl-policy abc