Cisco Catalyst 4500 Series, Руководство по настройке программного обеспечения, Страница: 1439 / 2086

52-11
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 52 Configuring Web-Based Authentication
Configuring Web-Based Authentication
Configuring the HTTP Server
To use web-based authentication, you must enable the HTTP server within the switch. You can enable
the server for either HTTP or HTTPS.
To enable the server, perform one of these tasks:
Starting with Cisco IOS Release 12.2(50)SG, you can optionally configure custom authentication proxy
web pages or specify a redirection URL for successful login, as described in the following sections:
•
Customizing the Authentication Proxy Web Pages, page 52-11
• Specifying a Redirection URL for Successful Login, page 52-12
Customizing the Authentication Proxy Web Pages
With Cisco IOS Release 12.2(50)SG, you have the option to display four substitute HTML pages to the
user in place of the switch’s internal default HTML pages during web-based authentication.
To specify the use of your custom authentication proxy web pages, first store your custom HTML files
on the switch’s internal disk or flash memory, then perform this task in global configuration mode:
When configuring customized authentication proxy web pages, observe the following guidelines:
•
To enable the custom web pages feature, specify all four custom HTML files. If you specify fewer
than four files, the internal default HTML pages are used.
•
The four custom HTML files must be present on the disk or flash of the switch. The maximum size
of each HTML file is 8 KB.
• Any images on the custom pages must be located on an accessible HTTP server. An intercept ACL
must be configured within the admission rule to allow access to the HTTP server.
Command Purpose
Switch(config)# ip http server
Enables the HTTP server. The web-based authentication
feature uses the HTTP server to communicate with the
hosts for user authentication.
Switch(config)# ip http secure-server
Enables HTTPS.
Command Purpose
Step 1
Switch(config)# ip admission proxy http login
page file device:login-filename
Specifies the location in the switch memory file system of
the custom HTML file to use in place of the default login
page. The
device: is either disk or flash memory, such as
disk0: .
Step 2
Switch(config)# ip admission proxy http success
page file device:success-filename
Specifies the location of the custom HTML file to use in
place of the default login success page.
Step 3
Switch(config)# ip admission proxy http failure
page file device:fail-filename
Specifies the location of the custom HTML file to use in
place of the default login failure page.
Step 4
Switch(config)#
ip admission proxy http login
expired page file device:expired-filename
Specifies the location of the custom HTML file to use in
place of the default login expired page.