D-Link DXS-3600 Series Cli Reference Manual page 1400

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
Usage Guideline
Web authentication is a feature designed to authenticate a user by using the Web browser when the user
is trying to access the Internet via the switch. The switch itself can be the authentication server and do the
authentication based on a local database or be a RADIUS client and perform the authentication process
via RADIUS protocol with remote RADIUS server. The authentication process uses either the HTTP or
HTTPS protocol.
Example
This example shows how to enable the Web authentication function globally on the switch.
Switch# configure terminal
Switch(config)# web-auth system-auth-control
Switch(config)#
121-5 web-auth virtual-ip
This command is used to configure the Web authentication virtual IP address which is used to accept
authentication requests from host. Use the no form of this command to return to the default setting.
web-auth virtual-ip {ipv4 IP-ADDRESS | ipv6 IPV6-ADDRESS | url STRING}
no web-auth virtual-ip {ipv4 | ipv6 | url}
Parameters
ipv4 IP-ADDRESS
url STRING
ipv6 IPV6-ADDRESS
Default
None.
Command Mode
Global Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline
The virtual IP of Web authentication is just the characterization of the Web authentication function on the
switch. All Web authentication processes communicate with this IP address, however, the virtual IP does
not respond to any ICMP packet or ARP request. So it's not allowed to configure virtual IP in the same
subnet as the switch's IP interface or the same subnet as the host PCs' subnet, otherwise the Web
authentication cannot operate correctly.
The defined URL only takes effect when the virtual IP address is configured. The users get the FQDN
URL stored on the DNS server to get the virtual IP address. The obtained IP address must match the
virtual IP address configured by the command.
If the IPv4 virtual IP is not configured, the IPv4 access cannot start a Web authentication. If the IPv6
virtual IP is not configured, the IPv6 access cannot start a Web authentication.
Example
Specifies the Web authentication virtual IPv4 address.
Specifies the FQDN URL for Web authentication The FQDN URL can
be up to 128 characters.
Specifies the Web authentication virtual IPv6 address.
1395