Web Authentication; Web-Auth Login-Attempts; Table 4-44 Web Authentication - Samsung iES4028F Management Manual

Web Authentication

Web authentication allows stations to authenticate and access the network in
situations where 802.1X or Network Access authentication methods are infeasible or
impractical. The web authentication feature allows unauthenticated hosts to request
and receive a DHCP assigned IP address and perform DNS queries. All other traffic,
except for http protocol traffic, is blocked. The switch intercepts http protocol traffic
and redirects it to a switch-generated web page that facilitates user name and
password authentication via RADIUS. Once authentication is successful, the web
browser is forwarded on to the originally requested web page. Successful
authentication is valid for all hosts connected to the port.
Notes: 1.
RADIUS authentication must be activated and configured properly for the
web authentication feature to work properly. (See "Configuring Local/Remote
Logon Authentication" on page 3-59)
2.
Web authentication cannot be configured on trunk ports.
Command

web-auth login-attempts

web-auth quiet-period
web-auth session-timeout
web-auth system-auth-control
web-auth
web-auth re-authenticate (Port) Ends all web authentication sessions on the port and
web-auth re-authenticate (IP)
show web-auth
show web-auth interface
show web-auth summary
web-auth login-attempts
This command defines the limit for failed web authentication login attempts. After the
limit is reached, the switch refuses further login attempts until the quiet time expires.
Use the no form to restore the default.
Syntax
web-auth login-attempts count
no web-auth login-attempts
count - The limit of allowed failed login attempts. (Range: 1-3)

Table 4-44 Web Authentication

Function
Defines the limit for failed web authentication login
attempts
Defines the amount of time to wait after the limit for
failed login attempts is exceeded.
Defines the amount of time a session remains valid
Enables web authentication globally for the switch
Enables web authentication for an interface
forces the users to re-authenticate
Ends the web authentication session associated with
the designated IP and forces the user to
re-authenticate
Displays global web authentication parameters
Displays interface-specific web authentication
parameters and statistics
Displays a summary of web authentication port
parameters and statistics
General Security Measures
Mode
GC
GC
GC
GC
IC
PE
PE
PE
PE
PE
4
Page
4-159
4-160
4-160
4-161
4-161
4-162
4-162
4-163
4-163
4-162
4-159