web-auth-server (system view)

Function

The web-auth-server command creates a Portal server template or displays the Portal server template view.

The undo web-auth-server command deletes a Portal server template.

By default, no Portal server template exists.

Format

web-auth-server server-name

undo web-auth-server server-name

Parameters

Parameter	Description	Value
server-name	Specifies the name of a Portal server.	The value is a string of 1 to 31 case-sensitive characters. It cannot contain spaces or the following symbols: / \ : * ? " < > \| @ ' %. The value cannot be - or --. NOTE: server-name cannot be set to listening-port, reply-message, version, or the first character or several leftmost characters of these character strings.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When an unauthenticated Portal user goes online, the device forces the user to log in to a specified website (also called the portal website). The user can access resources in the website for free. When the user attempts to access charged network resources, the user must pass authentication on the website. The specific process is as follows:

The unauthorized user opens Internet Explorer and enters a URL in the address box. When receiving the HTTP request sent by the user, the device redirects it to the Portal authentication page of the Portal server.
The user enters user information on the authentication page or in the authentication dialog box, and the Portal server forwards the user information to the device.
After receiving the user information from the Portal server, the device sends the information to the authentication server for authentication and accounting.
After the user is authenticated, the device allows the user to access the Internet if no security policy is enforced.

After a Portal server template is created on the device by using the web-auth-server command, run other commands to create a route from the device to the Portal server.

Follow-up Procedure

Run the following commands to configure related attributes of the Portal server template:

Run the server-ip command to configure an IP address for the Portal server.
Run the url command to configure a URL of the Portal server.
Run the port command to set the port number that a Portal server uses to receive notification packets from the device.
Run the shared-key command configures the shared key that the device uses to exchange information with the Portal server.

Precautions

You are advised to back up the Portal server data to prevent authentication failure caused by the Portal server fault.

Example

# Create Portal server template named huawei.

<HUAWEI> system-view
[HUAWEI] web-auth-server huawei