![background image](http://html.mh-extra.com/html/smc-networks/6152pl2-fiche/6152pl2-fiche_management-manual_1300644552.webp)
Command Line Interface
4-174
4
Web authentication allows stations to authenticate and access the network in
situations where 802.1X or Network Access authentication are infeasible or
impractical. The web authentication feature allows unauthenticated hosts to request
and receive a DHCP assigned IP address and perform DNS queries. All other traffic,
except for HTTP protocol traffic, is blocked. The switch intercepts HTTP protocol
traffic and redirects it to a switch-generated web page that facilitates user name and
password authentication via RADIUS. Once authentication is successful, the web
browser is forwarded on to the originally requested web page. Successful
authentication is valid for all hosts connected to the port.
Notes: 1.
RADIUS authentication must be activated and configured for the web
authentication feature to work properly (see ?$paratext>? on page 3-72).
2.
Web authentication cannot be configured on trunk ports.
This command defines the limit for failed web authentication login attempts. After the
limit is reached, the switch refuses further login attempts until the quiet time expires.
Use the
no
form to restore the default.
Syntax
web-auth login-attempts
count
no web-auth login-attempts
count
- The limit of allowed failed login attempts. (Range: 1-3)
Table 4-45 Web Authentication
Command
Function
Mode
Page
web-auth login-attempts
Defines the limit for failed web authentication login
attempts
GC
4-174
web-auth quiet-period
Defines the amount of time to wait after the limit for
failed login attempts is exceeded.
GC
4-175
web-auth session-timeout
Defines the amount of time a session remains valid
GC
4-175
web-auth system-auth-control
Enables web authentication globally for the switch
GC
4-176
web-auth
Enables web authentication for an interface
IC
4-176
web-auth re-authenticate (Port) Ends all web authentication sessions on the port and
forces the users to re-authenticate
PE
4-177
web-auth re-authenticate (IP)
Ends the web authentication session associated with
the designated IP address and forces the user to
re-authenticate
PE
4-177
show web-auth
Displays global web authentication parameters
PE
4-178
show web-auth interface
Displays interface-specific web authentication
parameters and statistics
PE
4-178
show web-auth summary
Displays a summary of web authentication port
parameters and statistics
PE
4-177
Summary of Contents for 6152PL2 FICHE
Page 2: ......
Page 6: ...vi ...
Page 8: ...viii ...
Page 32: ...Tables xxxii ...
Page 38: ...Figures xxxviii ...
Page 56: ...Initial Configuration 2 10 2 ...
Page 378: ...Configuring the Switch 3 322 3 ...
Page 817: ......