UAG CLI Reference Guide 142
CHAPTER 24
Web Authentication
24.1 Web Authentication Overview
Web authentication can intercepts network traffic, according to the authentication policies, until the
user authenticates his or her connection, usually through a specifically designated login web page.
This means all web page requests can initially be redirected to a special web page that requires
users to authenticate their sessions. Once authentication is successful, they can then connect to the
rest of the network or Internet.
As soon as a user attempt to open a web page, the UAG reroutes his/her browser to a web portal
page that prompts he/she to log in.
24.2 Web Authentication Commands
This table lists the commands for forcing user authentication. You must use the configure
terminal
command to enter the configuration mode before you can use these commands.
Table 79 web-auth Commands
COMMAND DESCRIPTION
[no] web-auth activate Enables force user authentication that force users to log in to the UAG
before the UAG routes traffic for them. The no command means the user
authentication is not required.
web-auth default-rule authentication
{required | unnecessary} {no log | log
[alert]}
Sets the default authentication policy that the UAG uses on traffic that does
not match any exceptional service or other authentication policy.
required: Users need to be authenticated. They must manually go to the
UAG’s login screen. The UAG will not redirect them to the login screen.
unnecessary: Users do not need to be authenticated.
no log | log [alert]: Select whether to have the UAG generate a log
(log), log and alert (log alert) or not (no log) for packets that match
this default policy.
web-auth [no] exceptional-service
service_name
Sets a service which you want users to be able to access without user
authentication. The
no command removes the specified service from the
exceptional list.
web-auth login setting Sets the login web page through which the user authenticates his or her
connection before he or she can then connect to the rest of the network or
Internet. See Table 80 on page 143 for the sub-commands.
web-auth method {portal | user-
agreement}
Sets a client to authenticate with the UAG through the specifically
designated web portal or user agreement page.
web-auth policy <1..1024> Creates the specified condition for forcing user authentication, if necessary,
and enters sub-command mode. The conditions are checked in sequence,
starting at 1. See Table 81 on page 145 for the sub-commands.
To Next Page
Loading...
