Table of Contents
Advertisement
2.
See Configuration commands and Web authentication modes for the authentication
mode in which the command's settings are operable.
3.
Set a VLAN ID for which
command.
4.
Be especially careful when using this functionality, as it might pose a security
problem.
5.
This command is enabled when the following condition exists:
All the following configurations have been set:
radius-server host
-
web-authentication system-auth-control
-
web-authentication port
-
-
web-authentication vlan
-
vlan
-
web-authentication force-authorized vlan
switchport mac vlan
-
-
switchport mode mac-vlan
-
aaa authentication web-authentication
-
web-authentication authentication
#1
Set this configuration to use it in dynamic VLAN mode.
#2
Set this command when using legacy mode.
#3
Set the same VLAN ID.
#4
Specify the same Ethernet port.
The following accounting log data is collected when an authentication
-
request is sent to the RADIUS server:
No=21:
to connection to RADIUS server.
Check the account log with the show web-authentication
logging operation command.
#5
When forced authentication is used as the Switch default, set only
group radius
#6
Set
aaa authentication web-authentication
authentication that uses the port-based authentication method.
6.
The authorized forced authentication state is canceled if the applicable user logs out.
7.
When private traps are issued, use the
destination IP address for traps and
mac-based
(MAC VLAN) has been set in the
or
web-authentication radius-server host
<VLAN ID>
mac-based
#2, #3, #4
NOTICE:LOGIN:
<Additional information>
additional-information: MAC, USER, IP, PORT or CHGR, VLAN
.
snmp-server host
web-authentication
web-authentication force-authorized vlan
#1, #4
#2, #3
#3
#3, #4
#4
#5
#6
Login failed ; Failed
<List name>
command to set the
.
vlan
default
for forced
441
Advertisement
Table of Contents
