(Optional) Configuring a Whitelist for Web Users Who Access the Network Using HTTPS

This section describes how to configure a whitelist for web users who access the network using HTTPS.

Context

When web users access the network using HTTPS and a list of accessible domain names or IP addresses in the pre-authentication domain needs to be configured, you can configure whitelists so that the system sends DNS packets that match the whitelists to the CPU while redirecting the DNS packets that do not match the whitelists to a specified web server address.

Procedure

Run system-view
The system view is displayed.
Run dns-url permit url-name
A whitelist is configured for web users who access the network using HTTPS.
Run dns-redirect response ttl ttl-value
A TTL value is configured for the DNS packets that do not match the whitelist.
Run aaa
The AAA view is displayed.
Run domain domain-name
The domain view is displayed.
Run dns-redirect web-server ip-address
The IP address of the web server to which DNS packets are redirected is configured.
Run commit
The configuration is committed.