172
Default
No IP-based portal-free rule is configured.
Views
System view
Predefined user roles
network-admin
Parameters
rule-number: Specifies a portal-free rule number in the range of 0 to 4294967295.
destination: Specifies the destination information.
source: Specifies the source information.
ip ip-address: Specifies an IPv4 address for the portal-free rule.
{ mask-length | mask }: Specifies the subnet mask of the IPv4 address. The value range for the
mask-length argument is 0 to 32. The mask argument is in dotted decimal format.
ipv6 ipv6-address: Specifies an IPv6 address for the portal-free rule.
prefix-length: Specifies the prefix length of the IPv6 address, in the range of 0 to 128.
ip any: Represents any IPv4 address.
ipv6 any: Represents any IPv6 address.
tcp tcp-port-number: Specifies a TCP port number for the portal-free rule, in the range of 0 to 65535.
udp udp-port-number: Specifies a UDP port number for the portal-free rule, in the range of 0 to 65535.
all: Specifies all portal-free rules.
Usage guidelines
You can specify both the source and destination keyword for a portal-free rule. If you specify only one
keyword, the other keyword does not serve as a filtering criterion.
If you specify both a source port number and a destination port number for a portal-free rule, the two port
numbers must belong to the same transport layer protocol.
You cannot configure two portal-free rules with the same filtering criteria.
Examples
# Configure an IPv4-based portal-free rule: specify the rule number as 1, the source IP address as
10.10.10.1/24, the destination IP address as 20.20.20.1, and the destination TCP port number as 23.
<Sysname> system-view
[Sysname] portal free-rule 1 destination ip 20.20.20.1 32 tcp 23 source ip 10.10.10.1 24
With this rule, users in subnet 10.10.10.1/24 do not need to pass portal authentication when they access
services provided on TCP port 23 of host 20.20.20.1.
# Configure an IPv4-based portal-free rule: specify the rule number as 2, the source IP address as
2000::1/64, the destination IP address as 2001::1, and the destination TCP port number as 23.
<Sysname> system-view
[Sysname] portal free-rule 2 destination ipv6 2001::1 128 tcp 23 source ip 2000::1 64
With this rule, users in subnet 2000::1/64 do not need to pass portal authentication when they access
services provided on TCP port 23 of host 2001::1.