Cisco Catalyst 3750-X User Manual

12-13
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
OL-21521-01
Chapter 12 Configuring Web-Based Authentication
Configuring Web-Based Authentication
This example shows how to configure the RADIUS server parameters on a switch:
Switch(config)# ip radius source-interface Vlan80
Switch(config)# radius-server host
172.l20.39.46 test username user1
Switch(config)# radius-server key
rad123
Switch(config)# radius-server dead
-criteria tries 2
Configuring the HTTP Server
To use web-based authentication, you must enable the HTTP server within the switch. You can enable
the server for either HTTP or HTTPS.
You can configure custom authentication proxy web pages or
specify a redirection URL for successful
login.
Note To ensure secure authentication when you enter the ip http secure-secure command, the login page is
always in HTTPS (secure HTTP) even if the user sends an HTTP request.
• Customizing the Authentication Proxy Web Pages
• Specifying a Redirection URL for Successful Login
Customizing the Authentication Proxy Web Pages
You can configure web authentication to display four substitute HTML pages to the user in place of the
switch default HTML pages during web-based authentication.
To specify the use of your custom authentication proxy web pages, first store your custom HTML files
o
n the switch flash memory, then perform this task in global configuration mode:
Command Purpose
Step 1
ip http server Enable the HTTP server. The web-based authentication feature uses the HTTP server
to communicate with the hosts for user authentication.
Step 2
ip http secure-server Enable HTTPS.
Command Purpose
Step 1
ip admission proxy http login page file
device:login-filename
Specify the location in the switch memory file system of
the custom HTML file to use in place of the default login
page. The device: is flash memory.
Step 2
ip admission proxy http success page file
device:success-filename
Specify the location of the custom HTML file to use in
place of the default login success page.
Step 3
ip admission proxy http failure page file
device:fail-filename
Specify the location of the custom HTML file to use in
place of the default login failure page.
Step 4
ip admission proxy http login expired page file
device:expired-filename
Specify the location of the custom HTML file to use in
place of the default login expired page.

Cisco Catalyst 3750-X Specifications

General

Brand	Cisco
Model	Catalyst 3750-X
Category	Switch
Language	English