H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 229)

215
# On VLAN-interface 100, configure the interface to be tracked as VLAN-interface 8 and reduce
the priority of VLAN-interface 100 in VRRP group 1 by 120 when the interface state of
VLAN-interface 8 becomes Down or Removed.
[AC1–Vlan-interface100] vrrp vrid 1 track interface vlan-interface8 reduced 120
[AC1–Vlan-interface100] quit
# Create VRRP group 2, and configure the virtual IP address of VRRP group 2 as 8.1.1.68.
[AC1] interface vlan-interface 8
[AC1–Vlan-interface8] vrrp vrid 2 virtual-ip 8.1.1.68
# Set the priority of VLAN-interface 8 in VRRP group 2 to 200.
[AC1–Vlan-interface8] vrrp vrid 2 priority 200
# On VLAN-interface 8, configure the interface to be tracked as VLAN-interface 100 and reduce
the priority of VLAN-interface 8 in VRRP group 2 by 120 when the interface state of VLAN-interface
100 becomes Down or Removed.
[AC1–Vlan-interface8] vrrp vrid 2 track interface vlan-interface100 reduced 120
[AC1–Vlan-interface8] quit
2. Configure a RADIUS scheme:
# Create RADIUS scheme rs1 and enter its view.
[AC1] radius scheme rs1
# Configure the server type for the RADIUS scheme. When using the IMC server, configure the
RADIUS server type as extended.
[AC1-radius-rs1] server-type extended
# Specify the primary authentication server and primary accounting server, and configure the keys
for communication with the servers.
[AC1-radius-rs1] primary authentication 8.1.1.2
[AC1-radius-rs1] primary accounting 8.1.1.2
[AC1-radius-rs1] key authentication expert
[AC1-radius-rs1] key accounting expert
# Configure the scheme to remove the ISP domain name in the username sent to the RADIUS server.
(By default, the ISP domain name is carried in the username. Configure the username format as
needed.)
[AC1-radius-rs1] user-name-format without-domain
[AC1-radius-rs1] quit
3. Configure an authentication domain:
# Create ISP domain dm1 and enter its view.
[AC1] domain dm1
# Configure AAA methods for the ISP domain.
[AC1-isp-dm1] authentication portal radius-scheme rs1
[AC1-isp-dm1] authorization portal radius-scheme rs1
[AC1-isp-dm1] accounting portal radius-scheme rs1
[AC1-isp-dm1] quit
4. Enable portal authentication on the interface connected to the client:
# Configure the portal server, with name configured as local, IP address as 16.16.0.8 (the virtual
IP address of VRRP group 1), and URL as http://16.16.0.8/portal/logon.htm.
[AC1] portal server local ip 16.16.0.8 url http://16.16.0.8/portal/logon.htm