Juniper JUNOS OS 10.3 - SOFTWARE, Manual

Page: 2700 / 3946

Step-by-Step
Procedure
To configure captive portal on the switch:
To create a secure channel for Web access to the switch, configure captive portal
for HTTPS:
1.
a.
Associate the security certificate with the Web server and enable HTTPS on the
switch:
[edit]
user@switch#
set system services web-management https local-certificate
my-signed-cert
NOTE: You can enable HTTP instead of HTTPS, but we recommend
HTTPS for security purposes.
b.
Configure captive portal to use HTTPS:
[edit]
user@switch#
set services captive-portal secure-authentication https
2.
Enable an interface for captive portal:
[edit]
user@switch#
set services captive-portal interface ge-0/0/10
3.
(Optional) Allow specific clients to bypass captive portal authentication:
[edit]
user@switch#
set ethernet-switching-options authentication-whitelist
00:10:12:e0:28:22
NOTE: Optionally, you can use set ethernet-switching-options
authentication-whitelist 00:10:12:e0:28:22 interface ge-0/0/10.0
to
limit the scope to the interface.
If the MAC address has already been learned on the interface, you must clear it
using the
clear captive-portal interface interface-name ) before adding it to the
whitelist. Otherwise the new entry for the MAC address will not be added to the
ethernet switching table and the authentication bypass will not be allowed.
4.
(Optional) To redirect clients to a specified page rather than the page they originally
requested, configure the post-authentication URL:
[edit services captive-portal]
user@switch#
set custom-options post-authentication-url
http://www.my-home-page.com
Results Display the results of the configuration:
Copyright © 2010, Juniper Networks, Inc. 2604
Complete Software Guide for Junos
®
OS for EX Series Ethernet Switches, Release 10.3