HP 3600 v2 Series Security Configuration Guide

150
To do… Use the command… Remarks
Specify a source IP address for
outgoing portal packets
portal nas-ip ip-address
Optional
By default, no source IP address is
specified and the IP address of the
user logon interface is used as the
source IP address of the outgoing
portal packets.
In NAT environments, HP
recommends specifying the
interface’s public IP address as the
source IP address of outgoing
portal packets.
Configuring portal stateful failover
NOTE:
Only Layer 3 portal authentication supports this feature.
To implement stateful failover for portal, configure VRRP for traffic switchover, and perform the following
configurations for service backup on each of the two devices that back up each other:
• Specify an interface for backing up portal services, which is called portal service backup interface
in this document, and enable portal on the portal service backup interface. The portal service
backup interface is different from the stateful failover interface. Stateful failover interfaces only
forward state negotiation messages and backup data.
• Specify the portal group to which the portal service backup interface belongs. Be sure to specify the
same portal group for the portal service backup interfaces that back up each other on the two
devices.
• Specify the device ID. Make sure that the device ID of the local device is different from that of the
peer device.
• Specify the backup source IP address for RADIUS packets to be sent as the source IP address for
RADIUS packets that is configured on the peer device, so that the peer device can receive packets
from the server. (This configuration is optional.)
• Specify the backup VLAN, and enable stateful failover. For related configuration, see High
Availability Configuration Guide.
After the working state of the two devices changes from independence to synchronization and the portal
group takes effect, the two devices start to back up the data of online portal users for each other.
Follow these steps to configure stateful failover:
To do… Use the command…
Remarks
Enter system view system-view —
Enter interface view
interface interface-type
interface-number
—

HP 3600 v2 Series Specifications

General

Brand	HP
Model	3600 v2 Series
Category	Switch
Language	English