1-10
Description
Use the web-authentication protocol command to specify the access protocol for Web authentication.
If you specify the access protocol as HTTPS, authentication information exchanged between the switch
and its clients will be in ciphertext.
Use the undo web-authentication protocol command to restore the default.
By default, HTTP is used between the switch and its clients.
Note that:
z You must configure this command before enabling Web authentication. That is, after enabling Web
authentication, you cannot change the access protocol for Web authentication.
z Before configuring HTTPS access for Web authentication, be sure to configure the SSL server
policy and request a certificate for the PKI domain of the SSL server policy.
z After modifying the used SSL server policy, you need to disable Web authentication and then
enable it again in system view to make the changes take effect.
z Only SSL 3.0 and TLS 1.0 are supported. SSL 2.0 is not supported.
z With HTTPS access for Web authentication configured on the switch, clients need to use HTTP 1.1
to log in. Otherwise, the speed of opening the authentication page will be very low.
Examples
# Configure HTTPS access for Web authentication, specifying to use SSL server policy pt_ssl.
<Sysname> system-view
[Sysname] web-authentication protocol https server-policy pt_ssl
web-authentication select method
Syntax
web-authentication select method { shared | designated | extended }
undo web-authentication select
View
Port view
Parameters
shared: Uses the Web authentication access method of shared.
designated: Uses the Web authentication access method of designated.
extended: Uses the Web authentication access method of extended.
Description
Use the web-authentication select command to enable Web authentication on the current port and set
the Web authentication access method.
Use the undo web-authentication select command to disable Web authentication on the port.
There are three Web authentication access methods:
z Shared: In this method, a port allows multiple Web authentication users to get online at the same
time.
z Designated: In this method, a port allows only one Web authentication user to be online at a time.
To Next Page
Loading...
Need help?
General