HP 12500 Series Configuration Manual page 5

Extended portal functions ··································································································································· 103
Portal system components ··································································································································· 103
Portal authentication mode ································································································································· 105
Portal authentication process ····························································································································· 106
Portal authentication across VPNs ····················································································································· 108
Portal configuration task list ········································································································································ 108
Configuration prerequisites ········································································································································· 109
Specifying the portal server ········································································································································ 110
Enabling portal authentication ···································································································································· 110
Configuration restrictions and guidelines ········································································································· 110
Configuration procedure ···································································································································· 111
Controlling access of portal users ······························································································································ 111
Configuring a portal-free rule····························································································································· 111
Configuring an authentication subnet ··············································································································· 112
Setting the maximum number of online portal users ························································································ 113
Specifying an authentication domain for portal users ····················································································· 113
Configuring RADIUS related attributes ······················································································································ 114
Specifying NAS-Port-Type for an interface ······································································································· 114
Specifying a source IP address for outgoing portal packets ··················································································· 115
Specifying an automatic redirection URL for authenticated portal users ································································ 115
Configuring portal detection functions ······················································································································· 116
Configuring the portal server detection function ······························································································ 116
Configuring portal user information synchronization ······················································································ 117
Logging out portal users ·············································································································································· 118
Configuring the control mode for portal user packets ····························································································· 118
Enabling portal user roaming ····································································································································· 119
Displaying and maintaining portal ···························································································································· 120
Portal configuration examples ···································································································································· 120
Configuring direct portal authentication ··········································································································· 121
Configuring re-DHCP portal authentication ······································································································ 125
Configuring cross-subnet portal authentication ································································································ 127
Configuring direct portal authentication with extended functions·································································· 129
Configuring re-DHCP portal authentication with extended functions ···························································· 131
Configuring cross-subnet portal authentication with extended functions ······················································· 133
Configuring portal server detection and portal user information synchronization ······································· 135
Cross-subnet portal authentication across VPNs ······························································································ 141
Troubleshooting portal ················································································································································· 143
Inconsistent keys on the access device and the portal server ········································································· 143
Incorrect server port number on the access device ·························································································· 143
Configuring password control ································································································································ 145
Overview ······································································································································································· 145
FIPS compliance ··························································································································································· 147
Password control configuration task list ····················································································································· 147
Configuring password control ···································································································································· 148
Enabling password control ································································································································· 148
Setting global password control parameters ···································································································· 149
Setting user group password control parameters ···························································································· 150
Setting local user password control parameters ······························································································ 150
Setting super password control parameters ····································································································· 151
Setting a local user password in interactive mode ·························································································· 151
Displaying and maintaining password control ········································································································· 152
Password control configuration example ·················································································································· 152
iii