Example for Configuring Layer 3 Portal Authentication

Created: Dec 17, 2016 23:18:01Latest reply: Dec 18, 2016 00:02:05 942 1 0 0

Example for Configuring Layer 3 Portal Authentication


This example applies to all AR models of all versions.

NOTE:The 4GE-2S, 4ES2G-S, 4ES2GP-S, and 9ES2 cards do not support NAC.

Networking Requirements

As shown in  Figure 1, an enterprise needs to deploy an identity authentication system in reception rooms to implement access control on guests who attempt to connect to the enterprise network, ensuring that only authenticated users can access the network. To facilitate future network reconstruction and save investment, it is required that the authentication control point be deployed on the core device.

Portal authentication features flexible deployment and is applicable to moving users. The core device RouterA and guests' terminals communicate at Layer 3. Therefore, you can deploy Layer 3 Portal authentication on RouterA to implement access control on guests who attempt to connect to the enterprise network. The RADIUS server and Portal server are integrated on the same device.

Figure 14-9  Networking diagram for configuring Layer 3 Portal authentication


  1. Configure RouterA.

  2. Configure RouterB.

  3. Verify the configuration.

    • The Portal authentication page is pushed to a guest when the guest attempts to access the network. After the guest enters the correct user name and password, the requested web page is automatically displayed.
    • After the authentication succeeds, run the display access-user command. Information about online users is displayed.

Configuration Notes

Before performing the configuration, ensure that devices on the network can communicate.

The RADIUS authentication shared key, RADIUS accounting shared key, and Portal shared key must be kept consistent on the router and server.

  • x
  • convention:

user_2790689     Created Dec 18, 2016 00:02:05 Helpful(0) Helpful(0)

Good example
  • x
  • convention:


You need to log in to reply to the post Login | Register

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Fast reply Scroll to top