Cisco Catalyst 2960 Series, Руководство по настройке

Страница: 1508 / 2288

• The custom login page should follow best practices for a web form, such as page timeout, hidden
password, and prevention of redundant submissions.
Redirection URL for Successful Login Guidelines
When configuring a redirection URL for successful login, consider these guidelines:
• If the custom authentication proxy web pages feature is enabled, the redirection URL feature is disabled
and is not available in the CLI. You can perform redirection in the custom-login success page.
• If the redirection URL feature is enabled, a configured auth-proxy-banner is not used.
• To remove the specification of a redirection URL, use the no form of the command.
• If the redirection URL is required after the web-based authentication client is successfully authenticated,
then the URL string must start with a valid URL (for example, http://) followed by the URL information.
If only the URL is given without http://, then the redirection URL on successful authentication might
cause page not found or similar errors on a web browser.
Web Authentication Redirection to Original URL Overview
The Web Authentication Redirection to Original URL feature enables networks to redirect guest users to the
URL that they had originally requested. This feature is enabled by default and requires no configuration.
Guest networks are network connections provided by an enterprise to allow their guests to gain access to the
Internet and to their own enterprise networks without compromising the security of the host enterprise. Guest
users of an enterprise network can connect to the guest access network through either a wired Ethernet
connection or a wireless connection.
Guest access uses a captive portal to gather all web requests made by guests and redirect these requests to one
of the guest on-boarding web pages. When guests successfully complete the guest workflow, they are redirected
to the page that they had originally requested.
The originally requested URL is passed as metadata along with the Cisco Identity Services Engine (ISE) guest
access redirect URL. The Cisco ISE is a security policy management and control platform. It automates and
simplifies access control and security compliance for wired, wireless, and VPN connectivity. The requested
URL is added at the end of the Cisco ISE guest URL so that the device can send the redirect URL to the guest
client. The Cisco ISE parses the URL and redirects the guest to the original URL after completing the
on-boarding.
The following is an example of a redirect URL along with the original requested URL:
https://10.64.67.92:8443/guestportal/gateway?sessionId=0920269E0000000B0002426B&action=cwa&redirect_
url=http://www.cisco.com/
In this example, the URL, https://10.64.67.92:8443/guestportal/gateway?sessionId=
0920269E0000000B0002426B&action=cwa is the URL for the guest portal,
“ & ” tells the browser that what
follows is a list of name value pairs, and redirect_url=http://www.cisco.com identifies the URL that the user
originally requested and to which the user is redirected after completing the guest workflow.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1426
Information About Web-Based Authentication