Configuring Port Web Authentication (PWA)
17-62 Security Configuration
Configuring Port Web Authentication (PWA)

About PWA

PWAprovidesawayofauthenticatingusersbeforeallowinggeneralaccesstothenetwork
TologonusingPWA,theusermakesarequestthroughawebbrowserforthePWAwebpageoris
automaticallyredirectedtothisloginpageafterrequestingaURLinabrowser.
Dependingupontheauthenticatedstateoftheuser,aloginpageoralogoutpagewilldisplay.
Whenausersubmitsusernameandpassword,theswitchthenauthenticatestheuserviaa
preconfiguredRADIUSserver.Iftheloginissuccessful,thentheuserwillbegrantedfullnetwork
accessaccordingtotheuser’spolicyconfigurationontheswitch.
Purpose
Toreview,enable,disable,andconfigurePortWebAuthentication(PWA).
Commands
Note: A license is required to enable PWA on the SecureStack B2 and B3, and the D-Series switch.
Refer to “Activating Licensed Features” on page3-30 for more information.
Note: One user per PWA-configured port can be authenticated on D-Series devices.
PWA authentication does not support RFC-3580 VLAN authorization.
For information about... Refer to page...
show pwa 17-63
set pwa 17-64
show pwa banner 17-65
set pwa banner 17-65
clear pwa banner 17-66
set pwa displaylogo 17-66
set pwa ipaddress 17-67
set pwa protocol 17-67
set pwa guestname 17-68
clear pwa guestname 17-68
set pwa guestpassword 17-69
set pwa gueststatus 17-69
set pwa initialize 17-70
set pwa quietperiod 17-70
set pwa maxrequest 17-71
set pwa portcontrol 17-71