The web-auth-server source command configures the source IP address of portal packets sent by the Router to the web authentication server.
The undo web-auth-server source command deletes the configured source IP address of portal packets sent by the Router to the web authentication server.
By default, the source IP address of portal packets sent by the Router to the web authentication server is not configured.
This command is supported only on the NetEngine 8000 F1A.
Parameter | Description | Value |
---|---|---|
vpn-instance vpn-name |
Specifies the name of the VPN instance. |
The value is a string of 1 to 31 characters. |
ip-address |
Specifies a source IPv4 address. |
The value is in dotted decimal notation. |
ipv6addr |
Specifies a source IPv6 address. |
The address is a 32-digit hexadecimal number, in the format of X:X:X:X:X:X:X:X. |
Usage Scenario
In N:1 RUI scenarios, the mapping between the address pool and BAS-IP address on the web authentication server must be specified for each pair of master and slave devices. An IP address pool, however, is shared only between the master and slave devices. Therefore, each pair of master and slave devices must have a source IP address to communicate with the web authentication server. To specify the source IP address of portal packets sent by the device to the web authentication server as the BAS-IP address used independently by the web authentication server, run the web-auth-server source command. In actual applications, the specified source IP address must already exist on the device, and the route to this IP address must be reachable.
When the source IP address is used to access the web authentication server, a VPN attribute can be specified. If vpn-instance is not specified, the address is a public one.Precautions
In VS mode, this command is supported only by the admin VS.
Before running the web-auth-server source command, a loopback interface must have been created, with the IP address the same as <SOURCE-IP-ADDRESS> specified in the web-auth-server source command, and the route to the loopback interface's IP address must be reachable. The loopback interface's IP address cannot be used in other service applications.<HUAWEI> system-view [~HUAWEI] interface LoopBack 10 [*HUAWEI-Loopback10] ip address 10.102.0.1 255.255.255.0 [*HUAWEI-Loopback10] commit [~HUAWEI-Loopback10] quit [*HUAWEI] remote-backup-service rui [*HUAWEI-rm-backup-srv-rui] commit [~HUAWEI-rm-backup-srv-rui] web-auth-server source 10.102.0.1