Cisco Catalyst 4500 Series Software Configuration Guide

52-4
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 52 Configuring Web-Based Authentication
About Web-Based Authentication
Customization of the Authentication Proxy Web Pages
During the web-based authentication process, the internal HTTP server of the switch hosts four HTML
pages for delivery to an authenticating client. The four pages allow the server to notify you of the
following four states of the authentication process:
• Login—Your credentials are requested.
• Success—The login was successful.
• Fail—The login failed.
• Expire—The login session has expired because of excessive login failures.
Note When your customized web-based authentication page is replaced with a new page (file) of the same
name in the switch system directory (i.e. flash), the new page will not be seen; you will see the older
page. Beginning with Release 15.0(2)SG, the new page will not display until you enter the ip admission
proxy http refresh-all command.
In Cisco IOS Release 12.2(50)SG, you can substitute your custom HTML pages for the four default
internal HTML pages, or you can specify a URL to which you are redirected upon successful
authentication, effectively replacing the internal Success page.
Web-Based Authentication Interactions with Other Features
These sections describe web-based authentication interactions with these features:
• Port Security, page 52-4
• LAN Port IP, page 52-5
• Gateway IP, page 52-5
• ACLs, page 52-5
• Context-Based Access Control, page 52-5
• 802.1X Authentication, page 52-5
• EtherChannel, page 52-5
• Switchover, page 52-5
Port Security
You can configure web-based authentication and port security on the same port. (You configure port
security on the port with the switchport port-security interface configuration command.) When you
enable port security and web-based authentication on a port, web-based authentication authenticates the
port, and port security manages network access for all MAC addresses, including that of the client. You
can then limit the number or group of clients that can access the network using the port.
For more information about enabling port security, see Chapter 55, “Configuring Port Security.”

Cisco Catalyst 4500 Series Specifications

General

Series	Catalyst 4500 Series
Category	Switch
Layer Support	Layer 2, Layer 3
Form Factor	Modular chassis
Stackable	No
Chassis Slots	3, 6, 7, 10
Power Supply Options	AC, DC
Redundancy	Power supply, Supervisor engine
Network Management	Cisco IOS Software CLI, SNMP, Cisco Prime Infrastructure
Features	Security, QoS
Port Density	Up to 384 ports per chassis
Security Features	802.1X, ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard
Supervisor Engine	8-E