Configuring Web-Based Authentication - Cisco Catalyst 4500 Series Software Configuration Manual

Configuring Web-Based Authentication

Configuring Web-Based Authentication
These sections describe how to configure web-based authentication:
•
•
•
•
•
•
•
•
•
Default Web-Based Authentication Configuration
Table 52-1
Table 52-1
Feature
AAA
RADIUS server
•
•
•
Default value of inactivity timeout
Inactivity timeout
Web-Based Authentication Configuration Guidelines and Restrictions
When configuring web-based authentication, consider these guidelines and restrictions:
•
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
52-6
Default Web-Based Authentication Configuration, page 52-6
Web-Based Authentication Configuration Guidelines and Restrictions, page 52-6
Web-Based Authentication Configuration Task List, page 52-7
Configuring the Authentication Rule and Interfaces, page 52-7
Configuring AAA Authentication, page 52-9
Configuring Switch-to-RADIUS-Server Communication, page 52-9
Configuring the HTTP Server, page 52-11
Configuring the Web-Based Authentication Parameters, page 52-13
Removing Web-Based Authentication Cache Entries, page 52-14
shows the default web-based authentication configuration.
Default Web-based Authentication Configuration
IP address
UDP authentication port
Key
Web authentication requires two Cisco Attribute-Value (AV) pair attributes:
The first attribute, priv-lvl=15, must always be set to 15. This sets the privilege level of the user who
is logging into the switch.
The second attribute is an access list to be applied for web-authenticated hosts. The syntax is similar
to 802.1x per-user access control lists (ACLs). However, instead of ip:inacl, this attribute must begin
with proxyacl, and the source field in each entry must be any. (After authentication, the client IP
address replaces the any field when the ACL is applied.)
For example:
proxyacl# 10=permit ip any 10.0.0.0 255.0.0.0
proxyacl# 20=permit ip any 11.1.0.0 255.255.0.0
proxyacl# 30=permit udp any any eq syslog
Chapter 52 Configuring Web-Based Authentication
Default Setting
Disabled
None specified
•
1812
•
None specified
•
3600 seconds
Enabled