Configuration Procedure; Configuring A Web Authentication-Free User; Configuring Https Access For Web Authentication - H3C S3100 Series Operation Manual

Configuration Procedure

Follow these steps to configure an Auth-Fail VLAN for Web authentication:
To do...
Enter system view
Enter port view
Configure an Auth-Fail VLAN for
Web authentication
Different ports can be configured with different Auth-Fail VLANs, but one port can be configured
with one Auth-Fail VLAN at most.
If you configure both Web authentication and MAC authentication on a port and specify an MAFV
for Web authentication and an MGV for MAC authentication, the assignment of the MAFV entry for
a user will overwrite the MGV entry for the user, while the assignment of the MGV entry for a user
will not overwrite the MAFV entry for the user.
If the MAFV for 802.1X authentication on a port has been assigned to a user, the MAFV for Web
authentication will not take effect for the user.

Configuring a Web Authentication-Free User

Follow these steps to configure a web authentication-free user:
Enter system view
Configure a web
authentication-free
user

Configuring HTTPS Access for Web Authentication

HTTP and HTTPS can be used for interaction between an authentication client and an access device:
If HTTP is used, there are potential security problems because HTTP packets are transferred in
plain text;
If HTTPS is used, data security is ensured because HTTPS packets are transferred in ciphertext
based on SSL.
system-view
interface interface-type
interface-number
web-authentication auth-fail
vlan authfail-vlan-id
To do...
In system view
In Ethernet
interface view
Use the command...
Use the command...
system-view
web-authentication free-user ip
ip-address mac mac-address
[ interface interface-list ]
interface interface-type
interface-number
web-authentication free-user ip
ip-address mac mac-address
1-4
Remarks
—
—
Required
Not configured by default.
Remarks
—
Required
Use at least one
approach.
By default, no web
authentication-free user is
configured.