Cisco Catalyst 4500 Series, Software Configuration Manual

Page: 1436 / 2086

52-8
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 52 Configuring Web-Based Authentication
Configuring Web-Based Authentication
This example shows how to enable web-based authentication on Fast Ethernet port 5/1:
Switch(config)# ip admission name webauth1 proxy http
Switch(config)# interface fastethernet 5/1
Switch(config-if)# ip admission webauth1
Switch(config-if)# exit
Switch(config)# ip device tracking
This example shows how to verify the configuration:
Switch# show ip admission configuration
Authentication Proxy Banner not configured
Authentication global cache time is 60 minutes
Authentication global absolute time is 0 minutes
Authentication global init state time is 2 minutes
Authentication Proxy Watch-list is disabled
Authentication Proxy Rule Configuration
Auth-proxy name webauth1
http list not specified inactivity-time 60 minutes
Authentication Proxy Auditing is disabled
Max Login attempts per user is 5
Step 2
Switch(config)# interface type slot/port
Enters interface configuration mode and specifies the
ingress Layer 2 or Layer 3 interface to be enabled for
web-based authentication.
type can be fastethernet, gigabit ethernet, or
tengigabitethernet
Step 3
Switch(config-if)# ip access-group name
Applies the default ACL.
Step 4
Switch(config-if)# ip admission name
Configures web-based authentication on the specified
interface.
Step 5
Switch(config-if)#
exit
Returns to configuration mode.
Step 6
Switch(config)# ip device tracking
Enables the IP device tracking table.
Step 7
Switch ( config ) # ip device tracking [ probe { count
count | interval interval }]
(Optional) Configures these parameters for the IP device
tracking table:
• count— Number of times that the switch sends the
ARP probe. The range is 1 to 5. The default is 3.
•
interval— Number of seconds that the switch waits
for a response before resending the ARP probe. The
range is 30 to 300 seconds. The default is 30 seconds.
Step 8
Switch ( config ) # ip device tracking [ probe { delay
interval }]
(Optional) Configures the optional probe delay parameter
for the IP device tracking table:
•
interval —Number of seconds that the switch delays
sending an ARP probe, triggered by link-up and ARP
probe generation by the tracked device. The range is
1 to 120 seconds. The default is 0 seconds.
Step 9
Switch(config)# end
Returns to privileged EXEC mode.
Step 10
Switch# show ip admission configuration
Displays the configuration.
Command Purpose