Korenix JetNet 5228G Series, User Manual

Page: 139 / 658

Client Security
3-93
3
Web Authentication
Web authentication allows stations to authenticate and access the network in
situations where 802.1X or Network Access authentication are infeasible or
impractical. The web authentication feature allows unauthenticated hosts to request
and receive a DHCP assigned IP address and perform DNS queries. All other traffic,
except for HTTP protocol traffic, is blocked. The switch intercepts HTTP protocol
traffic and redirects it to a switch-generated web page that facilitates username and
password authentication via RADIUS. Once authentication is successful, the web
browser is forwarded on to the originally requested web page.
Notes: 1. RADIUS authentication must be activated and configured properly for the
web authentication feature to work properly. (See “Configuring Local/Remote
Logon Authentication” on page 3-58)
2. Web authentication cannot be configured on trunk ports.
Configuring Web Authentication
Web authentication is configured on a per-port basis, however there are four
configurable parameters that apply globally to all ports on the switch.
Command Attributes
• System Authentication Control – Enables Web Authentication for the switch.
(Default: Disabled)
• Session Timeout – Configures how long an authenticated session stays active
before it must be re-authenticated. (Range: 300-3600 seconds; Default: 3600
seconds)
• Quiet Period – Configures how long a host must wait to attempt authentication
again after it has exceeded the maximum allowable failed login attempts.
(Range: 1-180 seconds; Default: 60 seconds)
• Login Attempts – Configures the number of times a supplicant may attempt and
fail authentication before it must wait the configured quiet period. (Range: 1-3
attempts; Default: 3 attempts)
Web – Click Security, Web Authentication, Configuration. Set the required global
parameters, and click Apply.
Figure 3-54 Web Authentication Configuration