SNR S2989G-48TX-POE Руководство по настройке онлайн [361/553] 747269

Превью страниц Страница 361 / 553

S2989G-24TX Operation Manual

Chapter 6 Security Function Configuration

6-88

the IP and port of the radius server, and it is enabled the accounting function. The

Ethernet1/0/2 is connected to pc1, the port is enabled portal authentication function, and

the redirection address is configured as the IP and port of the portal server. So the

Ethernet1/0/2 forbids all the traffic and only allows the dhcp/dns/arp packets.

The switch2 is the convergence switch, the Ethernet1/0/2 is communicated to the

radius server, the Ethernet1/0/3 is communicated to the portal server. The address of the

radius server is 192.168.40.100, and the address of the portal server is 192.168.40.99.

The Ethernet1/0/4 is connected to DHCP server and the Ethernet1/0/5 is connected to

DNS server. The Ethernet1/0/6 is the trunk port and connected to the Ethernet1/0/4 of the

trunk port of switch1.

Configure the radius server:

switch (config)#radius-server key 0 test

switch (config)#aaa group server radius radius_aaa_1

switch (config-sg-radius)# server 192.168.40.100

The configuration of global authentication:

Switch(config)#interface vlan 1

Switch(config-if-vlan1)#ip address 192.168.40.50 255.255.255.0

Switch(config)#free-resource 1 destination ipv4 192.168.40.99/32

Switch(config)# vlan-pool 1 2-10

Configure the portal function and portal server under the portal instance:

Switch (config)#captive-portal

Switch (config-cp)#enable

Switch(config-cp)# nas-ipv4 192.168.40.50

Switch(config-cp)# external portal-server server-name abc ipv4 192.168.40.99

Switch (config-cp)# configuration 1

Switch (config-cp-instance)#name helix4

Switch (config-cp-instance)#radius-auth-server abc99

Switch (config-cp-instance)# redirect attribute nas-ip enable

Switch (config-cp-instance)#redirect attribute nas-ip name kk

Switch (config-cp-instance)#ac-name helix4

Switch (config-cp-instance)#redirect url-head http://192.168.40.99/a70.htm

Switch (config-cp-instance) # portal-server ipv4 abc

Enable the portal function on the port:

Switch (config)# interface ethernet1/0/2