Configuring online detection of portal users

Use the online detection feature to quickly detect abnormal logouts of portal users. Configure ARP or ICMP detection for IPv4 portal users. Configure ND or ICMPv6 detection for IPv6 portal users.

If the device receives no packets from a portal user within the idle time, the device detects the user's online status as follows:

• ICMP or ICMPv6 detection—Sends ICMP or ICMPv6 requests to the user at configurable intervals to detect the user status.

  • If the device receives a reply within the maximum number of detection attempts, it considers that the user is online and stops sending detection packets. Then the device resets the idle timer and repeats the detection process when the timer expires.

  • If the device receives no reply after the maximum number of detection attempts, the device logs out the user.

• ARP or ND detection—Sends ARP or ND requests to the user and detects the ARP or ND entry status of the user at configurable intervals.

  • If the ARP or ND entry of the user is refreshed within the maximum number of detection attempts, the device considers that the user is online and stops detection. Then the device resets the idle timer and repeats the detection process when the timer expires.

  • If the ARP or ND entry of the user is not refreshed after the maximum number of detection attempts, the device logs out the user.

ARP detection and ND detection apply only to direct and re-DHCP portal authentication. ICMP detection applies to all portal authentication modes.

1. Enter system view.

   system-view

2. Enter Layer 3 interface view.

   interface interface-type interface-number

3. Configure online detection of portal users.

   IPv4:

   portal user-detect type { arp | icmp } [ retry retries ] [ interval interval ] [ idle time ]

   IPv6:

   portal ipv6 user-detect type { icmpv6 | nd } [ retry retries ] [ interval interval ] [ idle time ]

   By default, online detection is disabled for portal users on an interface.