4-59
Web and MAC Authentication
Configuring MAC Authentication on the Switch
Figure 4-37. Example of Running Configuration Output When RADIUS Response is Configured
HTTP Redirect When MAC Address Not Found
When a client’s MAC address is checked by the RADIUS server against the
known list of MAC addresses, and the MAC address is not found, the client
needs a way to quickly become registered through a web registration process.
The HTTP Redirect feature provides a way for a client who has failed MAC
authentication to become registered through a web/registration server. Only
a web browser is required for this authentication process.
HP Switch(config)# show running-config
Running configuration:
; J8692A Configuration Editor; Created on release #K.14.00x
hostname "HP Switch 3500yl-24G"
web-management ssl
qos dscp-map 000000 priority 0
module 1 type J86xxA
module 3 type J8694A
no stack auto-join
vlan 1
name "DEFAULT_VLAN"
untagged 1-14,19-24,A1-A4
ip address dhcp-bootp
no untagged 15-18
exit
vlan 100
name "auth-vid"
untagged 15-18
ip address dhcp-bootp
exit
radius-server host 10.0.13.118 key 'secret'
aaa authentication port-access eap-radius
snmp-server community "public" Unrestricted
aaa port-access web-based 5
aaa port-access web-based 5 auth-vid 100
aaa port-access web-based 5 unauth-vid 1
aaa port-access web-based dhcp-addr 172.18.0.0 255.255.255.0
aaa port-access web-based access-denied-message radius-response
RADIUS response configured
To Next Page
Loading...
Need help?
General
