HPE FlexNetwork 5510 HI Series Security Configuration Guide

143
File name rules
The names of the main authentication page files are fixed (see Table 14). You can define the names
of the files other than the main authentication page files. File names and directory names are case
insensitive.
Table 14 Main authentication page file names
Main authentication page
File name
Logon page logon.htm
Logon success page logonSuccess.htm
Logon failure page logonFail.htm
Online page
Pushed after the user gets online for online notification
online.htm
System busy page
Pushed when the system is busy or the user is in the logon process
busy.htm
Logoff success page logoffSuccess.htm
Page request rules
The local portal Web server supports only Get and Post requests.
• Get requests—Used to get the static files in the authentication pages and allow no recursion.
For example, if file Logon.htm includes contents that perform Get action on file ca.htm, file
ca.htm cannot include any reference to file Logon.htm.
• Post requests—Used when users submit username and password pairs, log in, and log out.
Post request attribute rules
1. Observe the following requirements when editing a form of an authentication page:
 An authentication page can have multiple forms, but there must be one and only one form
whose action is logon.cgi. Otherwise, user information cannot be sent to the local portal
Web server.
 The username attribute is fixed as PtUser. The password attribute is fixed as PtPwd.
 The value of the PtButton attribute is either Logon or Logoff, which indicates the action
that the user requests.
 A logon Post request must contain PtUser, PtPwd, and PtButton attributes.
 A logoff Post request must contain the PtButton attribute.
2. Authentication pages logon.htm and logonFail.htm must contain the logon Post request.
The following example shows part of the script in page logon.htm.
<form action=logon.cgi method = post >
<p>User name:<input type="text" name = "PtUser" style="width:160px;height:22px"
maxlength=64>
<p>Password :<input type="password" name = "PtPwd" style="width:160px;height:22px"
maxlength=32>
<p><input type=SUBMIT value="Logon" name = "PtButton" style="width:60px;"
onclick="form.action=form.action+location.search;">
</form>
3. Authentication pages logonSuccess.htm and online.htm must contain the logoff Post
request.
The following example shows part of the script in page online.htm.
<form action=logon.cgi method = post >

HPE FlexNetwork 5510 HI Series Specifications

General

Brand	HPE
Model	FlexNetwork 5510 HI Series
Category	Switch
Language	English