Configuring The Http Server - Cisco Catalyst 4500 Series Software Configuration Manual

Chapter 52 Configuring Web-Based Authentication

Configuring the HTTP Server

To use web-based authentication, you must enable the HTTP server within the switch. You can enable
the server for either HTTP or HTTPS.
To enable the server, perform one of these tasks:
Command
Switch(config)# ip http server
Switch(config)# ip http secure-server
Starting with Cisco IOS Release 12.2(50)SG, you can optionally configure custom authentication proxy
web pages or specify a redirection URL for successful login, as described in the following sections:
•
•
Customizing the Authentication Proxy Web Pages
With Cisco IOS Release 12.2(50)SG, you have the option to display four substitute HTML pages to the
user in place of the switch's internal default HTML pages during web-based authentication.
To specify the use of your custom authentication proxy web pages, first store your custom HTML files
on the switch's internal disk or flash memory, then perform this task in global configuration mode:
Command
Step 1
Switch(config)# ip admission proxy http login
page file device:login-filename
Step 2
Switch(config)# ip admission proxy http success
page file device:success-filename
Step 3
Switch(config)# ip admission proxy http failure
page file device:fail-filename
Step 4
Switch(config)# ip admission proxy http login
expired page file device:expired-filename
When configuring customized authentication proxy web pages, observe the following guidelines:
•
•
•
Customizing the Authentication Proxy Web Pages, page 52-11
Specifying a Redirection URL for Successful Login, page 52-12
To enable the custom web pages feature, specify all four custom HTML files. If you specify fewer
than four files, the internal default HTML pages are used.
The four custom HTML files must be present on the disk or flash of the switch. The maximum size
of each HTML file is 8 KB.
Any images on the custom pages must be located on an accessible HTTP server. An intercept ACL
must be configured within the admission rule to allow access to the HTTP server.
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Configuring Web-Based Authentication
Purpose
Enables the HTTP server. The web-based authentication
feature uses the HTTP server to communicate with the
hosts for user authentication.
Enables HTTPS.
Purpose
Specifies the location in the switch memory file system of
the custom HTML file to use in place of the default login
page. The device: is either disk or flash memory, such as
disk0:.
Specifies the location of the custom HTML file to use in
place of the default login success page.
Specifies the location of the custom HTML file to use in
place of the default login failure page.
Specifies the location of the custom HTML file to use in
place of the default login expired page.
52-11