Cisco Catalyst 4500 series Administration Manual page 1288

Configuring Web-Based Authentication
Command
Step 2
Switch(config)# interface type slot/port
Step 3
Switch(config-if)# ip access-group name
Step 4
Switch(config-if)# ip admission name
Step 5
Switch(config-if)# exit
Step 6
Switch(config)# ip device tracking
Step 7
Switch(config)# ip device tracking [probe {count
count | interval interval}]
Step 8
Switch(config)# ip device tracking [probe {delay
interval}]
Step 9
Switch(config)# end
Step 10
Switch# show ip admission configuration
This example shows how to enable web-based authentication on Fast Ethernet port 5/1:
Switch(config)# ip admission name webauth1 proxy http
Switch(config)# interface fastethernet 5/1
Switch(config-if)# ip admission webauth1
Switch(config-if)# exit
Switch(config)# ip device tracking
This example shows how to verify the configuration:
Switch# show ip admission configuration
Authentication Proxy Banner not configured
Authentication global cache time is 60 minutes
Authentication global absolute time is 0 minutes
Authentication global init state time is 2 minutes
Authentication Proxy Watch-list is disabled
Authentication Proxy Rule Configuration
Auth-proxy name webauth1
Authentication Proxy Auditing is disabled
Max Login attempts per user is 5
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
48-8
http list not specified inactivity-time 60 minutes
Chapter 48 Configuring Web-Based Authentication
Purpose
Enters interface configuration mode and specifies the
ingress Layer 2 or Layer 3 interface to be enabled for
web-based authentication.
type can be fastethernet, gigabit ethernet, or
tengigabitethernet
Applies the default ACL.
Configures web-based authentication on the specified
interface.
Returns to configuration mode.
Enables the IP device tracking table.
(Optional) Configures these parameters for the IP device
tracking table:
count—Number of times that the switch sends the
•
ARP probe. The range is 1 to 5. The default is 3.
interval—Number of seconds that the switch waits
•
for a response before resending the ARP probe. The
range is 30 to 300 seconds. The default is 30 seconds.
(Optional) Configures the optional probe delay parameter
for the IP device tracking table:
interval—Number of seconds that the switch delays
•
sending an ARP probe, triggered by link-up and ARP
probe generation by the tracked device. The range is
1 to 120 seconds. The default is 0 seconds.
Returns to privileged EXEC mode.
Displays the configuration.
OL-27597-01