Cisco Catalyst 4500 Series Administration Guide

48-8
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-27597-01
Chapter 48 Configuring Web-Based Authentication
Configuring Web-Based Authentication
This example shows how to enable web-based authentication on Fast Ethernet port 5/1:
Switch(config)# ip admission name webauth1 proxy http
Switch(config)# interface fastethernet 5/1
Switch(config-if)# ip admission webauth1
Switch(config-if)# exit
Switch(config)# ip device tracking
This example shows how to verify the configuration:
Switch# show ip admission configuration
Authentication Proxy Banner not configured
Authentication global cache time is 60 minutes
Authentication global absolute time is 0 minutes
Authentication global init state time is 2 minutes
Authentication Proxy Watch-list is disabled
Authentication Proxy Rule Configuration
Auth-proxy name webauth1
http list not specified inactivity-time 60 minutes
Authentication Proxy Auditing is disabled
Max Login attempts per user is 5
Step 2
Switch(config)# interface type slot/port
Enters interface configuration mode and specifies the
ingress Layer 2 or Layer 3 interface to be enabled for
web-based authentication.
type can be fastethernet, gigabit ethernet, or
tengigabitethernet
Step 3
Switch(config-if)# ip access-group name
Applies the default ACL.
Step 4
Switch(config-if)# ip admission name
Configures web-based authentication on the specified
interface.
Step 5
Switch(config-if)# exit
Returns to configuration mode.
Step 6
Switch(config)# ip device tracking
Enables the IP device tracking table.
Step 7
Switch(config)# ip device tracking [probe {count
count | interval interval}]
(Optional) Configures these parameters for the IP device
tracking table:
• count—Number of times that the switch sends the
ARP probe. The range is 1 to 5. The default is 3.
• interval—Number of seconds that the switch waits
for a response before resending the ARP probe. The
range is 30 to 300 seconds. The default is 30 seconds.
Step 8
Switch(config)# ip device tracking [probe {delay
interval}]
(Optional) Configures the optional probe delay parameter
for the IP device tracking table:
• interval—Number of seconds that the switch delays
sending an ARP probe, triggered by link-up and ARP
probe generation by the tracked device. The range is
1 to 120 seconds. The default is 0 seconds.
Step 9
Switch(config)# end
Returns to privileged EXEC mode.
Step 10
Switch# show ip admission configuration
Displays the configuration.
Command Purpose

Cisco Catalyst 4500 Series Specifications

General

Series	Catalyst 4500 Series
Category	Switch
Layer Support	Layer 2, Layer 3
Form Factor	Modular chassis
Stackable	No
Chassis Slots	3, 6, 7, 10
Power Supply Options	AC, DC
Redundancy	Power supply, Supervisor engine
Network Management	Cisco IOS Software CLI, SNMP, Cisco Prime Infrastructure
Features	Security, QoS
Port Density	Up to 384 ports per chassis
Security Features	802.1X, ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard
Supervisor Engine	8-E