Web-Auth Login-Attempts; Web-Auth Quiet-Period; Web-Auth Session-Timeout; Web-Auth System-Auth-Control - SMC Networks 6152PL2 Management Manual

4
Command Line Interface
Web authentication allows stations to authenticate and access the network in
situations where 802.1X or Network Access authentication are infeasible or
impractical. The web authentication feature allows unauthenticated hosts to request
and receive a DHCP assigned IP address and perform DNS queries. All other traffic,
except for HTTP protocol traffic, is blocked. The switch intercepts HTTP protocol
traffic and redirects it to a switch-generated web page that facilitates user name and
password authentication via RADIUS. Once authentication is successful, the web
browser is forwarded on to the originally requested web page. Successful
authentication is valid for all hosts connected to the port.
Notes: 1.
RADIUS authentication must be activated and configured for the web
authentication feature to work properly (see ?$paratext>? on page 3-72).
2.
Web authentication cannot be configured on trunk ports.
Command

web-auth login-attempts

web-auth quiet-period

web-auth session-timeout

web-auth system-auth-control

web-auth

web-auth re-authenticate (Port) Ends all web authentication sessions on the port and

web-auth re-authenticate (IP)

show web-auth

show web-auth interface

show web-auth summary

This command defines the limit for failed web authentication login attempts. After the
limit is reached, the switch refuses further login attempts until the quiet time expires.
Use the no form to restore the default.
Syntax
web-auth login-attempts count
no web-auth login-attempts
count - The limit of allowed failed login attempts. (Range: 1-3)
4-174

Table 4-45 Web Authentication

Function
Defines the limit for failed web authentication login
attempts
Defines the amount of time to wait after the limit for
failed login attempts is exceeded.
Defines the amount of time a session remains valid
Enables web authentication globally for the switch
Enables web authentication for an interface
forces the users to re-authenticate
Ends the web authentication session associated with
the designated IP address and forces the user to
re-authenticate
Displays global web authentication parameters
Displays interface-specific web authentication
parameters and statistics
Displays a summary of web authentication port
parameters and statistics
Mode Page
GC 4-174
GC 4-175
GC 4-175
GC 4-176
IC 4-176
PE 4-177
PE 4-177
PE 4-178
PE 4-178
PE 4-177