Installation guide

Command Line Interface
4-152
4
Default Setting
Displays all filters.
Command Mode
Privileged Exec
Command Usage
When using a bit mask to filter displayed MAC addresses, a 1 means “care”
and a 0 means “don't care”. For example, a MAC of 00-00-01-02-03-04 and
mask FF-FF-FF-00-00-00 would result in all MACs in the range
00-00-01-00-00-00 to 00-00-01-FF-FF-FF to be displayed. All other MACs
would be filtered out.
Example
Web Authentication
Web authentication allows stations to authenticate and access the network in
situations where 802.1X or Network Access authentication methods are infeasible or
impractical. The web authentication feature allows unauthenticated hosts to request
and receive a DHCP assigned IP address and perform DNS queries. All other traffic,
except for http protocol traffic, is blocked. The switch intercepts http protocol traffic
and redirects it to a switch-generated web page that facilitates user name and
password authentication via RADIUS. Once authentication is successful, the web
browser is forwarded on to the originally requested web page. Successful
authentication is valid for all hosts connected to the port.
Notes: 1.
RADIUS authentication must be activated and configured properly for the
web authentication feature to work properly. (See “Configuring Local/Remote
Logon Authentication” on page 3-59)
2. Web authentication cannot be configured on trunk ports.
Console#show network-access mac-address-table
---- ----------------- --------------- --------- -------------------------
Port MAC-Address RADIUS-Server Attribute Time
---- ----------------- --------------- --------- -------------------------
1/1 00-00-01-02-03-04 172.155.120.17 Static 00d06h32m50s
1/1 00-00-01-02-03-05 172.155.120.17 Dynamic 00d06h33m20s
1/1 00-00-01-02-03-06 172.155.120.17 Static 00d06h35m10s
1/3 00-00-01-02-03-07 172.155.120.17 Dynamic 00d06h34m20s
Console#
Table 4-44 Web Authentication
Command Function Mode Page
web-auth login-attempts Defines the limit for failed web authentication login
attempts
GC 4-153
web-auth quiet-period Defines the amount of time to wait after the limit for
failed login attempts is exceeded.
GC 4-153
web-auth session-timeout Defines the amount of time a session remains valid GC 4-154