H3C S3100-52P Operation Manual page 460

Operation Manual – Web Authentication
H3C S3100-52P Ethernet switch
# Set the password that will be used to encrypt the messages exchanged between the
switch and the RADIUS authentication server.
[Sysname -radius-radius1] key authentication expert
# Configure the system to strip domain name off a user name before transmitting the
user name to the RADIUS server.
[Sysname-radius-radius1] user-name-format without-domain
[Sysname-radius-radius1] quit
# Create ISP domain aabbcc.net for Web authentication users and enter the domain
view.
[Sysname] domain aabbcc.net
# Configure domain aabbcc.net as the default user domain.
[Sysname] domain default enable aabbcc.net
# Reference scheme radius1 in domain aabbcc.net.
[Sysname-isp-aabbcc.net] scheme radius-scheme radius1
# Enable Web authentication globally. (It is recommended to take this step as the last
step, so as to avoid the case that a valid user cannot access the network due to that
some other related configurations are not finished.)
[Sysname] web-authentication enable
Now, Web authentication takes effect. Before the user passes the Web authentication,
it cannot access external networks and can only access the free resource.
The user can perform the following steps to access the Internet:
Step 1: Enter http://10.10.10.10:8080 in the address column of IE. A page with the
following prompt will be displayed: "Please input your name and the password!".
Step 2: Enter the correct user name and password and then click [login]. The following
page will be displayed: "Authentication passed!".
Now the user can access external networks.
Chapter 1 Web Authentication Configuration
1-5