Cisco Systems 4500 Configuring the HTTP Server

42-11
Software Configuration Guide—Release 15.0(2)SG
OL-23818-01
Chapter 42 Configuring Web-Based Authentication Configuring Web-Based Authentication
This example shows how to configure the RADIUS server parameters on a switch:
Switch(config)# ip radius source-interface Vlan80
Switch(config)# radius-server host 172.l20.39.46 test username user1
Switch(config)# radius-server key rad123
Switch(config)# radius-server dead-criteria tries 2
Configuring the HTTP Server
To use web-based authentication, you must enable the HTTP server within the switch. You can enable
the server for either HTTP or HTTPS.
To enable the server, perform one of these tasks:
Starting with Cisco IOS Release 12.2(50)SG, you can optionally configure custom authentication proxy
web pages or specify a redirection URL for successful login, as described in the following sections:
• Customizing the Authentication Proxy Web Pages, page 42-11
• Specifying a Redirection URL for Successful Login, page 42-13
Customizing the Authentication Proxy Web Pages
With Cisco IOS Release 12.2(50)SG, you have the option to display four substitute HTML pages to the
user in place of the switch’s internal default HTML pages during web-based authentication.
To specify the use of your custom authentication proxy web pages, first store your custom HTML files
on the switch’s internal disk or flash memory, then perform this task in global configuration mode:
Command Purpose
Switch(config)# ip http server Enables the HTTP server. The web-based authentication
feature uses the HTTP server to communicate with the
hosts for user authentication.
Switch(config)# ip http secure-server Enables HTTPS.
Command Purpose
Step 1 Switch(config)# ip admission proxy http login
page file device:login-filename Specifies the location in the switch memory file system of
the custom HTML file to use in place of the default login
page. The device: is either disk or flash memory, such as
disk0:.
Step 2 Switch(config)# ip admission proxy http success
page file device:success-filename Specifies the location of the custom HTML file to use in
place of the default login success page.
Step 3 Switch(config)# ip admission proxy http failure
page file device:fail-filename Specifies the location of the custom HTML file to use in
place of the default login failure page.
Step 4 Switch(config)# ip admission proxy http login
expired page file device:expired-filename Specifies the location of the custom HTML file to use in
place of the default login expired page.