Configuring Web Authentication - H3C S3100 Series Operation Manual

Web authentication can use only a RADIUS authentication scheme; it does not support local
authentication.
The user number limit configured under an AAA scheme does not take effect for Web
authentication. Web authentication does not support accounting. Configure accounting for the AAA
scheme as optional.

Configuring Web Authentication

Follow these steps to configure Web authentication:
To do...
Enter system view
Set the IP address and port
number of the Web authentication
server
Enable Web authentication
globally
Enable Web authentication on a
port
Set a free IP address range that
can be accessed by users before
Web authentication
Forcibly log out the specified or all
users.
Set the idle user checking interval
for Web authentication
Set the maximum online time for
Web authentication users
Set the maximum number of online
Web authentication users on a port
Use the command...
system-view
web-authentication web-server
ip ip-address [ port port-number ]
web-authentication enable
interface interface-type
interface-number
web-authentication select
method { shared | designated |
extended }
quit
web-authentication free-ip
ip-address { mask-length | mask }
web-authentication cut
connection { all | mac
mac-address | user-name
user-name | interface
interface-type interface-number }
web-authentication timer
idle-cut timer
web-authentication timer
max-online timer
web-authentication
max-connection number
1-2
Remarks
—
Required
If no port number is specified, port
80 will be used.
No Web authentication server is
set by default.
Required
Disabled globally by default
Required
Disabled on port by default
Optional
No such address range by default
Optional
Optional
900 seconds by default
Optional
1800 seconds by default
Optional
128 users by default