4-54
Web and MAC Authentication
Configuring MAC Authentication on the Switch
Configuring Custom Messages
This feature allows administrators to configure custom messages that are 
displayed when authentication with the RADIUS server fails. The messages 
are appended to the existing internal web page that displays during the 
authentication process. Messages can be configured using the CLI, or centrally 
using the RADIUS server, and can provide a description of the reason for the 
failure as well as possible steps to take to resolve the authentication issue. 
There is no change to the current web authentication functionality..
Figure 4-31. Example of Configuring an Access Denied Message on the Switch
Syntax: [no] aaa port-access web-based access-denied-message <<access-
denied-str>| radius-response>
Specifies the text message (ASCII string) shown on the web 
page after an unsuccessful login attempt. The message must 
be enclosed in quotes.
The no form of the command means that no message is 
displayed upon failure to authenticate.
Default: The internal web page is used. No message will be 
displayed upon authentication failure.
access-denied-str: The text message that is appended to the end 
of the web page when there is an unsuccessful authentication 
request. The string can be up to 250 ASCII characters.
radius-response: Use the text message provided in the RADIUS 
server response to the authentication request.
HP Switch(config)# aaa port-access web-based access-denied-message “Please 
contact your system administrator to obtain authentication privileges.”