42-8
Software Configuration Guide—Release 15.0(2)SG
OL-23818-01
Chapter 42 Configuring Web-Based Authentication
Configuring Web-Based Authentication
This example shows how to enable web-based authentication on Fast Ethernet port 5/1:
Switch(config)# ip admission name webauth1 proxy http
Switch(config)# interface fastethernet 5/1
Switch(config-if)# ip admission webauth1
Switch(config-if)# exit
Switch(config)# ip device tracking
This example shows how to verify the configuration:
Switch# show ip admission configuration
Authentication Proxy Banner not configured
Authentication global cache time is 60 minutes
Authentication global absolute time is 0 minutes
Authentication global init state time is 2 minutes
Authentication Proxy Watch-list is disabled
Authentication Proxy Rule Configuration
Auth-proxy name webauth1
http list not specified inactivity-time 60 minutes
Authentication Proxy Auditing is disabled
Max Login attempts per user is 5
Step 2 Switch(config)# interface type slot/port Enters interface configuration mode and specifies the
ingress Layer 2 or Layer 3 interface to be enabled for
web-based authentication.
type can be fastethernet, gigabit ethernet, or
tengigabitethernet
Step 3 Switch(config-if)# ip access-group name Applies the default ACL.
Step 4 Switch(config-if)# ip admission name Configures web-based authentication on the specified
interface.
Step 5 Switch(config-if)# exit Returns to configuration mode.
Step 6 Switch(config)# ip device tracking Enables the IP device tracking table.
Step 7 Switch(config)# ip device tracking [probe {count
count | interval interval}] (Optional) Configures these parameters for the IP device
tracking table:
• count—Number of times that the switch sends the
ARP probe. The range is 1 to 5. The default is 3.
• interval—Number of seconds that the switch waits
for a response before resending the ARP probe. The
range is 30 to 300 seconds. The default is 30 seconds.
Step 8 Switch(config)# ip device tracking [probe {delay
interval}] (Optional) Configures the optional probe delay parameter
for the IP device tracking table:
• interval—Number of seconds that the switch delays
sending an ARP probe, triggered by link-up and ARP
probe generation by the tracked device. The range is
1 to 120 seconds. The default is 0 seconds.
Step 9 Switch(config)# end Returns to privileged EXEC mode.
Step 10 Switch# show ip admission configuration Displays the configuration.
Command Purpose