Show Network-Access Mac-Filter; Web Authentication - Edge-Core ECS2100-10T Reference Manual

Chapter 9
| General Security Measures

Web Authentication

show network-access
mac-filter
Web Authentication
Example
Console#show network-access mac-address-table
Interface MAC Address
--------- ----------------- --------------- ------------------------- ---------
1/1 00-00-01-02-03-04 172.155.120.17
1/1 00-00-01-02-03-05 172.155.120.17
1/1 00-00-01-02-03-06 172.155.120.17
1/3 00-00-01-02-03-07 172.155.120.17
Console#
Use this command to display information for entries in the MAC filter tables.
Syntax
show network-access mac-filter [filter-id]
filter-id - Specifies a MAC address filter table. (Range: 1-64)
Default Setting
Displays all filters.
Command Mode
Privileged Exec
Example
Console#show network-access mac-filter
Filter ID MAC Address
--------- ----------------- -----------------
1 00-00-01-02-03-08 FF-FF-FF-FF-FF-FF
Console#
Web authentication allows stations to authenticate and access the network in
situations where 802.1X or Network Access authentication are infeasible or
impractical. The web authentication feature allows unauthenticated hosts to
request and receive a DHCP assigned IP address and perform DNS queries. All other
traffic, except for HTTP protocol traffic, is blocked. The switch intercepts HTTP
protocol traffic and redirects it to a switch-generated web page that facilitates user
name and password authentication via RADIUS. Once authentication is successful,
the web browser is forwarded on to the originally requested web page. Successful
authentication is valid for all hosts connected to the port.
Note: RADIUS authentication must be activated and configured for the web
authentication feature to work properly (see
page 188).
RADIUS Server Time
00d06h32m50s
00d06h33m20s
00d06h35m10s
00d06h34m20s
MAC Mask
"Authentication Sequence" on
– 276 –
Attribute
Static
Dynamic
Static
Dynamic