Binding A Web Authentication Server To An Interface; Optional)Configuring The Free Rule For Web Authentication - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
The Uniform Resource Locator (URL) is configured for the Web authentication server.
Step 5 Run:
port port-number [ all ]
The interface of the Web authentication server to which the S3700 sends notification messages
is configured.
Step 6 Run:
shared-key
The shared key used for the S3700 to exchange information with a Web authentication server
is configured.
----End

2.3.3 Binding a Web Authentication Server to an Interface

Context
After a Web authentication server is bound to a VLANIF interface, Web authentication can be
performed for all the access users on the VLANIF interface.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
interface interface-type interface-number
The interface view is displayed.
Currently, the S3700 can perform Web authentication for users only on VLANIF interfaces.
Step 3 Run:
web-auth-server server-name
The Web authentication server is bound to the VLANIF interface.
You must configure a Web authentication server in the system view first and then bind the server
to the interface according to the server name in the interface view.
Up to 8 Web authentication servers can be bound on the S3700and up to 16 VLANIF interfaces
can be bound to the Web authentication server.
----End

2.3.4 (Optional)Configuring the Free Rule for Web Authentication

Context
When some special users need to access certain resources when they fail to pass the
authentication, you need to configure the free rule.
Issue 01 (2011-07-15)
{ cipher | simple }key-string
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 NAC Configuration
52