H3c-technologies H3C SecPath F1000-E Manual de usuario Pagina 12
- Pagina / 182
- Tabla de contenidos
- SOLUCIÓN DE PROBLEMAS
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
11
NOTE:
The device selects the authentication domain for a portal user on an interface in this order: the ISP domain
specified for the interface, the ISP domain carried
in the username, and the system default ISP domain. Fo
r
more information about the default ISP domain, see
RADIUS Configuration
in the
Firewall Web
Configuration Manual
.
Configuring RADIUS Related Attributes
Specifying a NAS ID for an Interface
If an interface is configured with a NAS ID, when a portal user logs on from the interface, the device uses
the configured NAS ID as the NAS-identifier in the RADIUS request to be sent to the RADIUS server.
Follow these steps to specify a NAS ID for an interface:
To do… Use the command… Remarks
Enter system view
system-view
—
Enter interface view
interface interface-type
interface-number
—
Specify a NAS ID for the interface
portal nas-id nas-identifier
Required
By default, the device name
configured by the sysname
command is used as the NAS ID.
For information about the
sysname command, see Basic
System Configuration Commands
in the System Volume.
Specifying NAS-Port-Type for an Interface
NAS-Port-Type is a standard RADIUS attribute for indicating the type of a user access port. With this
attribute specified on an interface, when a portal user logs on from the interface, the device uses the
specified NAS-Port-Type value as that in the RADIUS request to be sent to the RADIUS server. If
NAS-Port-Type is not specified, the device uses the access port type obtained.
If there are multiple network devices between the Broadband Access Server (BAS, the portal
authentication access device) and a portal client, the BAS may not be able to obtain the correct access
port information of a user. For example, for a wireless client using portal authentication, the access port
type obtained by the BAS may be the type of the wired port that authenticates the user. Therefore, to
ensure that the BAS delivers the right access port information to the RADIUS server, you need to specify
the NAS-Port-Type according to the practical access environment.
Follow these steps to specify the NAS-Port-Type value for an interface:
To do… Use the command… Remarks
Enter system view
system-view
—
Enter interface view
interface interface-type
interface-number
—
- Table of Contents 1
- Portal Configuration 2
- Portal System Components 3
- Portal Authentication Modes 4
- Configuration Prerequisites 8
- RADIUS Configuration 12
- Firewall Web 12
- Configuration Manual 12
- Portal Packets 13
- 2. Probe parameters 15
- Logging Off Portal Users 17
- Step2 Configure Device 21
- DHCP Configuration 24
- Functions 27
- Information Synchronization 34
- Configuration considerations 35
- Troubleshooting Portal 42
- ALG Configuration 45
- 2. Authenticating the user 46
- Enabling ALG 47
- ALG Configuration Examples 47
- # Enable ALG for NBT 50
- # Configure NAT 50
- RSH Configuration 52
- RSH Configuration Example 53
- SSH2.0 Configuration 57
- Version negotiation 58
- Authentication 58
- Session request 59
- Interaction 59
- SSH Connection Across VPNs 60
- Public Key Commands 61
- Security Volume 61
- Interface Commands 62
- System Volume 62
- Configuring an SSH User 63
- SFTP Service 80
- Working with SFTP Files 83
- Displaying Help Information 84
- SSL Configuration 91
- SSL Configuration Task List 92
- Configuration Procedure 93
- Troubleshooting SSL 97
- Web Filtering Configuration 100
- Java Blocking 101
- ActiveX Blocking 101
- Configuring Web Filtering 102
- Network requirements 103
- Configuration procedure 104
- Invalid Use of Wildcard 107
- Invalid Blocking Suffix 107
- Public Key Configuration 109
- Connection Limit Overview 118
- Verification 121
- Symptom 121
- Analysis 121
- Solution 122
- Contents 123
- Firewall configuration 124
- IPsec Configuration 129
- Implementation of IPsec 130
- Basic Concepts of IPsec 130
- Encapsulation modes 131
- IPsec Tunnel Interface 132
- Configuring IPsec 134
- Implementing ACL-Based IPsec 135
- Mirror image ACLs 137
- Protection modes 138
- Configuring an IPsec Policy 139
- NOTE: 143
- Configuring an IPsec Profile 148
- Tunneling Commands 150
- IP Services Volume 150
- IPsec Configuration Examples 152
- 2. Configure Device B 153
- Configuation procedure 157
- 3. Configure Device C 162
- IKE Configuration 165
- Operation of IKE 166
- IKE Configuration Task List 167
- Gateway 168
- Configuring an IKE Proposal 168
- Configuring an IKE Peer 169
- Setting Keepalive Timers 171
- Configuring a DPD 172
- IKE Configuration Examples 173
- Traversal 175
- Troubleshooting IKE 180
- Proposal Mismatch 181
- ACL Configuration Error 181
Relacionado con productos y manuales para La Seguridad H3c-technologies H3C SecPath F1000-E
(95 paginas)
(17 paginas)© 2020, manymanuals.es. Todos los derechos reservados | 0.062 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales