Cisco Catalyst 3560-X Series, Software Configuration Manual

Page: 393 / 1538

1-13
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
OL-25303-03
Chapter 1 Configuring Web-Based Authentication
Configuring Web-Based Authentication
Note You need to configure some settings on the RADIUS server, including: the switch IP address, the key
string to be shared by both the server and the switch, and the downloadable ACL (DACL). For more
information, see the RADIUS server documentation.
This example shows how to configure the RADIUS server parameters on a switch:
Switch(config)# ip radius source-interface Vlan80
Switch(config)# radius-server host 172.l20.39.46 test username user1
Switch(config)# radius-server key rad123
Switch(config)# radius-server dead-criteria tries 2
Configuring the HTTP Server
To use web-based authentication, you must enable the HTTP server within the switch. You can enable
the server for either HTTP or HTTPS.
You can configure custom authentication proxy web pages or specify a redirection URL for successful
login.
Note
To ensure secure authentication when you enter the ip http secure-secure command, the login page is
always in HTTPS (secure HTTP) even if the user sends an HTTP request.
•
Customizing the Authentication Proxy Web Pages
• Specifying a Redirection URL for Successful Login
Customizing the Authentication Proxy Web Pages
You can configure web authentication to display four substitute HTML pages to the user in place of the
switch default HTML pages during web-based authentication.
To specify the use of your custom authentication proxy web pages, first store your custom HTML files
on the switch flash memory, then perform this task in global configuration mode:
Command Purpose
Step 1
ip http server Enable the HTTP server. The web-based authentication feature uses the HTTP server
to communicate with the hosts for user authentication.
Step 2 ip http secure-server Enable HTTPS.
Command Purpose
Step 1 ip admission proxy http login page file
device:login-filename
Specify the location in the switch memory file system of the custom
HTML file to use in place of the default login page. The
device: is
flash memory.
Step 2 ip admission proxy http success page file
device:success-filename
Specify the location of the custom HTML file to use in place of the
default login success page.