Table of Contents
Advertisement
Web-based Access Control (WAC)
Web-based Access Control (WAC), also known as
Web-based Authentication Login, is a feature
designed to authenticate a user when the user is
trying to access the Internet via the Switch.
The authentication process uses HTTP protocol.
The Switch enters the authenticating stage when
users would like to browse the Web window (ex:
http://www.yahoo.com) through the Web browser
(ex: IE...). When the switch detects HTTP packets
and this port or this host (host-based mode) is un-
authenticated,
the
switch
username/password screen to query users. The user
can't access the internet until the authentication
process has been successfully completed.
The Switch can be an authentication server itself
and do the authentication based on a local database
or be a RADIUS client and perform the
authentication process via the RADIUS protocol
with the remote RADIUS server.
To the right there is an example of the basic six
step process all parties of the authentication go
through for a successful Web-based Access Control
process.
Conditions and Limitations
Certain functions exist on the Switch that will filter HTTP packets, such as the Access Profile function. The user needs to be very
careful when setting filter functions for the target VLAN, so that these HTTP packets are not denied by the Switch.
If a RADIUS server is to be used for authentication, the user must first establish a RADIUS Server with the appropriate
parameters, including the target VLAN, before enabling the Web-based Access Control on the Switch.
WAC Global State
This window is used to enable and configure Web-based Access Control Global State on the Switch.
To view this window, click Security > Web Authentication > WAC Global State, as shown below:
®
xStack
DGS-3426G Layer 2 Gigabit Ethernet Managed Switch
will
pop
out
245
Advertisement
Table of Contents
