Web Authentication; Web-Auth Login-Attempts - SMC Networks 6128PL2 - annexe 2 Management Manual

Example
Console#show network-access mac-address-table
---- ----------------- --------------- --------- -------------------------
Port MAC-Address
---- ----------------- --------------- --------- -------------------------
1/1 00-00-01-02-03-04 172.155.120.17
1/1 00-00-01-02-03-05 172.155.120.17
1/1 00-00-01-02-03-06 172.155.120.17
1/3 00-00-01-02-03-07 172.155.120.17
Console#

Web Authentication

Web authentication allows stations to authenticate and access the network in
situations where 802.1X or Network Access authentication are infeasible or
impractical. The web authentication feature allows unauthenticated hosts to request
and receive a DHCP assigned IP address and perform DNS queries. All other traffic,
except for http protocol traffic, is blocked. The switch intercepts http protocol traffic
and redirects it to a switch-generated webpage that facilitates username and
password authentication via RADIUS. Once authentication is successful, the web
browser is forwarded on to the originally requested web page. Successful
authentication is valid for all hosts connected to the port.
Notes: 1.
MAC authentication, web authentication, 802.1X, and port security cannot be
configured together on the same port. Only one security mechanism can be
applied.
2.
RADIUS authentication must be activated and configured properly for the
web authentication feature to work properly. (See "Configuring Local/Remote
Logon Authentication" on page 3-48)
3.
Web authentication cannot be configured on trunk ports.
Command
web-auth
login-attempts
web-auth
login-fail-page-url
web-auth
login-page-url
web-auth
login-success-page-url
web-auth
quiet-period
web-auth
session-timeout
web-auth
system-auth-control
RADIUS-Server
Table 4-37 Web Authentication
Function
Defines the limit for failed web authentication login
attempts
Defines the external URL to which a host is directed after
a failed web authentication attempt
Defines the external URL to which a host is directed to
complete web authentication
Defines the external URL to which a host is directed after
a successful web authentication
Defines the amount of time to wait after the limit for failed
login attempts is exceeded.
Defines the amount of time a session remains valid
Enables web authentication globally for the switch
Authentication Commands
Attribute Time
Static 00d06h32m50s
Dynamic 00d06h33m20s
Static 00d06h35m10s
Dynamic 00d06h34m20s
4
Mode Page
GC 4-132
GC 4-132
GC 4-133
GC 4-133
GC 4-134
GC 4-134
GC 4-135
4-131