C H A P T E R 10 Configuring Web-Based Authentication - Cisco 3032 Software Configuration Manual

Understanding Web-Based Authentication
These sections describe the role of web-based authentication as part of AAA:
•
•
•
•
•
•
Device Roles
With web-based authentication, the devices in the network have these specific roles:
•
•
•
Figure 10-1
Figure 10-1
Workstations
(clients)
Cisco Catalyst Blade Switch 3130 and 3032 for Dell Software Configuration Guide
10-2
Device Roles, page 10-2
Host Detection, page 10-3
Session Creation, page 10-3
Authentication Process, page 10-3
Web Authentication Customizable Web Pages, page 10-6
Web-based Authentication Interactions with Other Features, page 10-7
Client—The device (workstation) that requests access to the LAN and the services and responds to
requests from the switch. The workstation must be running an HTML browser with Java Script
enabled.
Authentication server—Authenticates the client. The authentication server validates the identity of
the client and notifies the switch that the client is authorized to access the LAN and the switch
services or that the client is denied.
Switch—Controls the physical access to the network based on the authentication status of the client.
The switch acts as an intermediary (proxy) between the client and the authentication server,
requesting identity information from the client, verifying that information with the authentication
server, and relaying a response to the client.
shows the roles of these devices in a network:
Web-Based Authentication Device Roles
Catalyst switch
Cisco Router
Authentication
server
or
(RADIUS)
Chapter 10 Configuring Web-Based Authentication
OL-12247-04