Table of Contents
Advertisement
When you configure the parameter-name argument in this command, you must use the URL
parameter name supported by the Web browser. Different Web browsers support different URL
parameter names.
Examples
# Add parameters userip and userurl to the redirection URL of portal Web server wbs.
<Sysname> system-view
[Sysname] web-auth server wbs
[Sysname-web-auth-server-wbs] url-parameter userip source-address
[Sysname-web-auth-server-wbs] url-parameter userurl value http://www.abc.com/welcome
Related commands
web-auth server
web-auth auth-fail vlan
Use web-auth auth-fail vlan to specify an Auth-Fail VLAN for Web authentication.
Use undo web-auth auth-fail vlan to restore the default.
Syntax
web-auth auth-fail vlan authfail-vlan-id
undo web-auth auth-fail vlan
Default
No Auth-Fail VLAN is specified for Web authentication.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
authfail-vlan-id: Specifies the Auth-Fail VLAN ID in a range of 1 to 4094. The specified VLAN must
already exist.
User guidelines
After you configure this command on an interface, users who failed Web authentication on the
interface can access resources in the Auth-Fail VLAN. You must also configure the IP address of the
server that provides the resources as an authentication-free IP address.
To make the Auth-Fail VLAN take effect, you must also enable MAC-based VLAN on the interface,
and set the subnet of the Auth-Fail VLAN as the Web authentication-free subnet.
Because MAC-based VLAN takes effect only on Hybrid ports, Auth-Fail VLAN also takes effect only
on Hybrid ports.
If a user fails Web authentication, the device maps the MAC address of the user to the Auth-Fail
VLAN.
You cannot delete the VLAN that has been configured as an Auth-Fail VLAN. To delete this VLAN,
first cancel the Auth-Fail VLAN configuration by using undo web-auth auth-fail vlan command.
If a VLAN is specified as the super VLAN, do not configure this VLAN as an Auth-Fail VLAN of an
interface. If a VLAN is specified as an Auth-Fail VLAN of an interface, do not configure this VLAN as
a super VLAN.
704
Advertisement
Table of Contents
