User Access Manager Help >> Operation Guide >> User Access Policy >> Portal Service >> Portal Device >> Add/Modify Portal Device

Add/Modify Portal Device

This function helps you add/modify a Portal device.

Operation Procedure

1. Select the User tab, and then in the navigation tree select User Access Policy > Portal Service > Device to enter the Portal Device page.
2. Click Add or click corresponding to a Portal device in the device information list.
3. Enter the basic information of the Portal device, such as IP address, key and device name. Specify the listening port, version, and access method in the Advanced Information area.
4. Click OK.

Precautions

• The device name can neither be null nor be identical with any existing device name.
• The IP address you add or change to can neither be null nor be identical with any existing IP address.
• The configuration of key, IP address reallocation and version must be identical with that on the device.
• If you add a portal device without selecting a service group, the default group named Ungrouped is applied. When you modify the device configuration, the associated service group cannot be modified.
• As a best practice, configure each device name to contain no more than 30 characters if the number of portal devices is less than 100, no more than 20 characters if the number is between 100 to 200, and no more than 10 characters if the number exceeds 200.

Parameters

Device Information
• Device Name: Name of the Portal access device. This field cannot be identical with any existing device name.
• IP Address: IP address of the portal access device.
• Key: The key must be identical with the configuration on the device; otherwise authentication will fail.

Advanced Information
• Listening Port: This port is used by the device to listen to the UDP packets from the Portal Server during their communication.
• Local Challenge: During CHAP authentication, the Portal Server refers to this configuration to decide whether to send a Challenge request to the device. Currently, the Local Challenge mode is not supported.
• Authentication Retries: Specifies the times that the Portal Server resends an authentication request in case no response is received within the specified time.
• Logout Retries: Specifies the times that the Portal Server resends a logout request in case no response is received within the specified time.
• Support Server Heartbeat: Sets whether to enable the server heartbeat function for the portal access device. Select No for this parameter if the portal access device does not support the function, or you do not want to enable the function for the access device.

* Server Heartbeat: The Portal Server sends server heartbeat packets at the server heartbeat interval to portal access devices. If an access device does not receive any server heartbeat packet within a specific period of time, that is, when the Portal Server cannot work normally, the access device will switch its working mode from the authentication mode to escape mode. In escape mode, the access device disables authentication and allows all users to access the network. In this case, if the access device receives a server heartbeat packet again, namely, if the server resumes, the access device will immediately switch back to the authentication mode. You need to enable server heartbeat in the UAM system (through the Support Server Heartbeat parameter) as well as on the access devices. For detailed configuration on an access device, refer to the configuration manual of the device.

• Support User Heartbeat: Sets whether to enable the user heartbeat function for the portal access device. Select No if the access device does not support the function, or you do not want to enable the function for the access device.

* User Heartbeat: The Portal Server sends user heartbeat packets at the user heartbeat interval to portal access devices to notify the access devices of the user status on the server and synchronize the users on them. Users that are on both the server and the access devices will keep online, and other users will be logged out. You need to enable user heartbeat in the UAM system (through the Support User Heartbeat parameter) as well as on the access devices. For detailed configuration on an access device, refer to the configuration manual of the device.

• Version: Select a portal version that an access device supports. Options include Portal 2.0, Portal 3.0, CMCC, and Huawei Portal. Select Portal 2.0 for an Intelbras access device in an IPv4 network. Select Portal 3.0 for an Intelbras access device in an IPv6 network. Select Huawei Portal for a Huawei access device. Select CMCC for other access devices. The Portal 3.0 option appears only when Yes is selected from the Enable IPv6 list in system parameter configuration.
• Service Group: Select a service group for the portal device. The service group ensures privilege management of the portal device. The administrators and maintainers can add the portal device to one of the service groups to which they have the management privilege.
• Access Method: Specifies the authentication mode used by the device, Directly Connected, Layer 3, or Reallocate IP.

* Directly Connected: In this access method, the user is manually assigned or obtains through DHCP an IP address to access only the Portal Server and predefined free websites. After passing authentication, the user can access other network resources.

* Layer 3: Similar to the Directly Connected mode, but it allows Layer 3 forwarding devices to be present between the authentication client and the access device.

* Reallocate IP: IP address reallocation for Portal authentication is commonly applied to campus, residential area and enterprise networks. In this process, the access device first assigns a private network address to a user for access to the LAN resources. If the user wants to access the Internet, the access device forces Portal authentication. Once the user passes the authentication, it is assigned a public network address for Internet access. This process is called IP address reallocation. The parameter setting must be the same as that on the access device.

• DHCP Request Retransmit Delay: The time the Portal client waits for a response to its DHCP request during address update. This field appears only when Reallocate IP is selected in the Access Method field.
• DHCP Request Retransmit Times: The maximum times of address updates allowed for the Portal client during address update. This field appears only when Reallocate IP is selected in the Access Method field.
• Device Description: descriptive information of a device used to identify the device.