Displaying And Maintaining Web Authentication; Web Authentication Configuration Examples; Web Authentication Using The Local Authentication Server - HPE FlexNetwork 10500 Series Security Configuration Manual

•
Configure authentication-free rules to allow user packets destined for the IP address of the
WPAD server to pass without authentication.
For Web authentication to support Web proxy:
•
You must add the port numbers of the Web proxy servers on the device.
•
Users must make sure their browsers that use a Web proxy server do not use the proxy server
for the listening IP address of the local portal Web server. Thus, HTTP packets that the Web
authentication user sends to the local portal Web server are not sent to the Web proxy server.
To configure Web authentication to support a Web proxy:
Step
1. Enter system view.
2. Add a Web proxy server port
number.

Displaying and maintaining Web authentication

Execute display commands in any view.
Task
Display Web authentication configuration
information on interfaces.
Display Web authentication-free subnets.
Display Web authentication server information.
(In standalone mode.) Display Web authentication
user information.
(In IRF mode.) Display Web authentication user
information.

Web authentication configuration examples

Web authentication using the local authentication server

Network requirements
As shown in
Configure Web authentication to meet the following requirements:
•
The device performs local Web authentication on users that access the network through
GigabitEthernet 1/0/1.
•
The device pushes customized Web authentication pages to users and use HTTP to transfer
the authentication data.
Command
system-view
web-auth proxy port
port-number
Figure 166, the host is connected to the device through GigabitEthernet 1/0/1.
Command
display web-auth [ interface interface-type
interface-number ]
display web-auth free-ip
display web-auth server [ server-name ]
display web-auth user [ interface interface-type
interface-number | slot slot-number ]
display web-auth user [ interface interface-type
interface-number | chassis chassis-number slot
slot-number ]
599
Remarks
N/A
By default, no Web proxy server
port number is configured and
proxied HTTP requests cannot
trigger Web authentication.