Enabling Portal-Based Authentication On An Interface; Configuring The Switch-To-Radius-Server Communication - Cisco Catalyst 2928 Software Configuration Manual

Configuring Portal-Based Authentication

Enabling Portal-Based Authentication on an Interface

Beginning in privileged EXEC mode, follow these steps to configure portal-based authentication on a
specific interface.
I
Command
Step 1 configure terminal
Step 2 interface interface-id
Step 3 ip portal-auth security
Step 4
end
Step 5 show platform ip portal-auth user
interface interface-id [detailed]
Step 6 copy running-config startup-config
Use the no form of the command to return to the default settings.
This example shows how to configure portal-based authentication on an interface.
Switch# configure terminal
Switch(config)# interface FastEthernet0/2
Switch(config-if)# ip portal-auth security

Configuring the Switch-to-RADIUS-Server Communication

The third-party system that works with the switch to control network access includes a RADIUS server.
You must configure the communication between the switch and the RADIUS server.
RADIUS security servers are identified by their hostname or IP address, hostname and specific UDP port
numbers, or IP address and specific UDP port numbers. The combination of the IP address and UDP port
number creates a unique identifier, which enables RADIUS requests to be sent to multiple UDP ports on
a server at the same IP address. If two different host entries on the same RADIUS server are configured
for the same service—for example, authentication—the second host entry configured acts as the fail-over
backup to the first one. The RADIUS host entries are tried in the order that they were configured.
Beginning in privileged EXEC mode, follow these steps to configure the RADIUS server parameters on
the switch. This procedure is required.
Command
Step 1 configure terminal
Step 2 ip http server
Step 3
ip radius source-interface vlan1
Step 4
radius-server attribute 8
include-in-access-req
Catalyst 2928 Switch Software Configuration Guide
11-4
Purpose
Enter global configuration mode.
Specify the physical interface to be configured, and enter interface
configuration mode.
Enable IP portal authentication on the specified interface.
Return to privileged EXEC mode.
Verify your settings.
(Optional) Save your entries in the configuration file.
Purpose
Enter global configuration mode.
Enable the HTTP server in the switch to redirect the user to the portal
server.
Specify the VLAN interface for RADIUS server communication.
Include the user IP address in the access request sent to the RADIUS
server.
Chapter 11 Configuring Portal-Based Authentication
OL-23389-01