Chapter 8
| General Security Measures
Web Authentication
– 264 –
Note:
RADIUS authentication must be activated and configured for the web
authentication feature to work properly (see “Authentication Sequence” on
page 185).
Note:
Web authentication cannot be configured on trunk ports.
web-auth
login-attempts
This command defines the limit for failed web authentication login attempts. After
the limit is reached, the switch refuses further login attempts until the quiet time
expires. Use the no form to restore the default.
Syntax
web-auth login-attempts count
no web-auth login-attempts
count - The limit of allowed failed login attempts. (Range: 1-3)
Default Setting
3 login attempts
Command Mode
Global Configuration
Table 52: Web Authentication
Command Function Mode
web-auth login-attempts Defines the limit for failed web authentication login
attempts
GC
web-auth quiet-period Defines the amount of time to wait after the limit for
failed login attempts is exceeded.
GC
web-auth session-timeout Defines the amount of time a session remains valid GC
web-auth system-auth-control Enables web authentication globally for the switch GC
web-auth Enables web authentication for an interface IC
web-auth re-authenticate (Port) Ends all web authentication sessions on the port and
forces the users to re-authenticate
PE
web-auth re-authenticate (IP) Ends the web authentication session associated with the
designated IP address and forces the user to re-
authenticate
PE
show web-auth Displays global web authentication parameters PE
show web-auth interface Displays interface-specific web authentication
parameters and statistics
PE
show web-auth summary Displays a summary of web authentication port
parameters and statistics
PE