49-42
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 49 Configuring 802.1X Port-Based Authentication
Configuring 802.1X Port-Based Authentication
Figure 49-11 Downloadable ACLs
URL-Redirect
To configure URL-direct, you need to configure it on the ACS, and on the switch.
Configuring ACS
To configure two Cisco-AV pairs, add the following statements under the user or group Cisco IOS/PIX 6x RADIUS attributes:
url-redirect-acl=urlacl
url-redirect=http://www.cisco.com
Note A default port ACL must be configured on the interface.
Configuring the Switch
To configure the switch for URL redirect, follow these steps:
Step 1 Configure the IP device tracking table.
Switch(config)# ip device tracking
Step 2 Configure RADIUS by using the send authentication command.
Switch(config)# radius-server vsa send authentication
Step 3 Configure the URL redirect ACL (URLACL).
Switch# ip access-list urlacl
10 permit tcp any any
Switch#
Step 4 Configure static ACL (PACL) for the interface.
Switch(config)# int g2/9
Switch(config-if)# ip access-group pacl-4 in
Interface Configuration Example
Switch# show running-configuration int g2/9
Building configuration...
Current configuration : 617 bytes
!