A company needs a simple authenticate solution for guests. The HP Comware access layer switches will
implement portal authentication (or Web-Auth). The network administrator wants the switch to host the login
web page on an IP address that not used for any other purpose.
What should the administrator do to accomplish this goal?

A.
Set the IP address when defining the local portal server, and create a loopback interface for the address

B.
Create RADIUS scheme that specifies this IP address for the authentication server. Select this scheme for
portal authentication in the default domain

C.
Create a layer 3 interface for the guest VLAN and assign the desired IP address. Activate local portal
authentication on this interface.

D.
Set the IP address when defining the local portal server, and the switch automatically begins using that
address.

Explanation:
* Enable portal server on Onboarding VLAN Interface, this will activate the default Portal ACL (deny all, redirect
tcp port 80 to TCP-Cheat)
[comware5]interface Vlan-interface 21
[comware5-Vlan-interface21]portal server uam method layer3
[comware5-Vlan-interface21]quit
[comware5]
* how the Portal redirect works. These are the basic steps:
1. Admin enables Portal authentication on the Onboarding VLAN L3 Interface, this will effectively block all
traffic (default portal ACL)
2. User connects and “should” get an address through DHCP/DHCP Relay.
3. User opens browser, tries to access http://www.hp.com
4. User Device will send dns request for http://www.hp.com (to DNS IP Provided by DHCP server)
5. DNS “should” respond with public IP of http://www.hp.com (default Portal ACL will block this by default!)
Comware Portal Redirect for BYOD usehttp://abouthpnetworking.com/2014/01/30/comware-portal-redirect-for-byod-use/