Description: Configure web authentication based network authentication
on the device or the device's port(s).
The first form of the command sets the dhcp address,
dhcp lease, or ewa server parameters
which are common to all ports
The second form of the command enables, disables, or
configures authentication on the device's individual ports.
o 'dhcp-addr' sets the base address / mask for the temporary
pool used by DHCP (base address default is 192.168.0.0,
mask default is 24 - 255.255.255.0)
o 'dhcp-lease' sets the lease length of the temporary
IP address issued by DHCP (default 10)
o 'ewa-server' sets the ip address or hostname
of the enhanced web auth server used to
serve custom login pages for web auth
o 'page-path' sets the path of the login pages
to be found on the ewa server
o 'client-limit' sets the maximum number of clients to allow on
the port. This includes ALL clients (authenticated and
unauthenticated). The default is 1 client.
NOTE: No more than 32 unique client MAC addresses can be
authorized by both 802.1X and MAC/web-based
authentication together on the same port.
o 'client-moves' sets whether the client can move
between ports that also have 'client-moves' enabled
(default disabled - no moves allowed).
o 'ssl-login' sets whether to enable SSL logins (https on
port 443).
If enabled, logins to plaintext http (port 80)
are redirected to https port.
The default is disabled.
o 'redirect-url' sets the URL that the user should be
redirected to after successful login (default none)
Specify url up to 103 characters length.
o 'quiet-period' sets the period of time during which the
switch does not try to authenticate after a failed
authentication attempt (default 60 seconds).
o 'server-timeout' sets the period of time after which the
switch assumes that authentication has timed out
(default 30 seconds).
o 'max-requests' sets the number of authentication attempts
that must time out before authentication fails (default 3)
o 'max-retries' sets number of times a client can enter
their credentials before authentication is considered
to have failed (default 3).
o 'logoff-period' sets the period of time of inactivity that
56
©
2009 Hewlett-Packard Development Company, L.P.
aaa
Command Line Interface Reference Guide
Содержание 6200YL
Страница 2: ......
Страница 16: ...Introduction 14 2009 Hewlett Packard Development Company L P ...
Страница 22: ...Commands 20 2009 Hewlett Packard Development Company L P ...
Страница 505: ...503 2009 Hewlett Packard Development Company L P services Command Line Interface Reference Guide ...
Страница 676: ... cs3 cs4 cs5 cs6 cs7 674 2009 Hewlett Packard Development Company L P svlan Command Line Interface Reference Guide ...
Страница 764: ......