Table of Contents
Advertisement
View
System view
Default level
2: System level
Parameters
rule-number: Number for the portal-free rule, in the range of 0 to 15.
any: Imposes no limitation on the previous keyword.
ip ip-address: Specifies an IP address.
mask { mask-length | netmask }: Specifies the mask of the IP address, which can be in dotted decimal
notation or an integer in the range of 0 to 32.
interface interface-type interface-number: Specifies a source interface.
mac mac-address: Specifies a source MAC address in the format of H-H-H.
vlan vlan-id: Specifies a source VLAN ID.
all: Specifies all portal-free rules.
Description
Use the portal free-rule command to configure a portal-free rule and specify the source filtering condition
and/or destination filtering condition.
Use the undo portal free-rule command to remove a specific portal-free rule or all portal-free rules.
When you use the command, follow these guidelines:
•
If you specify both a source IP address and a source MAC address in a portal-free rule, the IP
address must be a host address with a 32-bit mask. Otherwise, the specified MAC address does not
take effect.
If you specify both a VLAN and an interface in a portal-free rule, the interface must belong to the
•
VLAN.
•
You cannot configure a portal-free rule to have the same filtering criteria as that of an existing one.
When attempted, the system prompts that the rule already exists.
No matter whether portal authentication is enabled on an interface, you can only add or remove a
•
portal-free rule. You cannot modify a portal-free rule.
Related commands: display portal free-rule.
Examples
# Configure a portal-free rule, allowing any packet whose source IP address is 10.10.10.1/24 and source
interface is GigabitEthernet 0/0 to bypass portal authentication.
<Sysname> system-view
[Sysname] portal free-rule 15 source ip 10.10.10.1 mask 24 interface gigabitethernet0/0
destination ip any
portal max-user
Syntax
portal max-user max-number
undo portal max-user
45
Advertisement
Table of Contents
