Cisco Catalyst 3650 Series User Manual

Command Modes
Global configuration
Command History
ModificationRelease
This command was introduced.Cisco IOS XE 3.3SECisco IOS XE 3.3SE
Usage Guidelines
The ip admission name command globally enables web authentication on a switch.
After you enable web authentication on a switch, use the ip access-group in and ip admission web-rule
interface configuration commands to enable web authentication on a specific interface.
Examples
This example shows how to configure only web authentication on a switch port:
Device# configure terminal
Device(config) ip admission name http-rule proxy http
Device(config)# interface gigabitethernet1/0/1
Device(config-if)# ip access-group 101 in
Device(config-if)# ip admission rule
Device(config-if)# end
This example shows how to configure IEEE 802.1x authentication with web authentication as a fallback
mechanism on a switch port:
Device# configure terminal
Device(config)# ip admission name rule2 proxy http
Device(config)# fallback profile profile1
Device(config)# ip access group 101 in
Device(config)# ip admission name rule2
Device(config)# interface gigabitethernet1/0/1
Device(config-if)# dot1x port-control auto
Device(config-if)# dot1x fallback profile1
Device(config-if)# end
Related Commands
DescriptionCommand
Configures a port to use web
authentication as a fallback method
for clients that do not support
IEEE 802.1x authentication.
dot1x fallback
Creates a web authentication
fallback profile.
fallback profile
Enables web authentication on a
port.
ip admission
Displays information about the web
authentication session status.
show authentication sessions interface interface detail
Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
761
ip admission name

Cisco Catalyst 3650 Series Specifications

General

Brand	Cisco
Model	Catalyst 3650 Series
Category	Switch
Language	English