Configuring a local portal Web service

Before you configure an HTTPS-based local portal Web service, you must complete the following tasks:

• Configure a PKI policy, obtain the CA certificate, and request a local certificate. For more information, see "Configuring PKI."

• Configure an SSL server policy, and specify the PKI domain configured in the PKI policy.

  During SSL connection establishment, the user browser might display a message that it cannot verify server identity by certificate. For users to perform portal authentication without checking such a message, configure an SSL server policy to request a client-trusted certificate on the device. The name of the policy must be https_redirect. For more information about SSL server policy configuration, see "Configuring SSL."

1. Enter system view.

   system-view

2. Create an HTTP- or HTTPS-based local portal Web service and enter its view.

   portal local-web-server { http | https ssl-server-policy policy-name [ tcp-port port-number ] }

3. Specify the default authentication page file for the local portal Web service.

   default-logon-page filename

   By default, no default authentication page file is specified for the local portal Web service.

   To provide local portal Web service for users, you must use this command to specify a customized authentication page file as the default authentication page file.

4. (Optional.) Configure the listening TCP port for the local portal Web service.

   tcp-port port-number

   By default, the HTTP service listening port number is 80 and the HTTPS service listening port number is the TCP port number set by the portal local-web-server command.