Specifications
Configuring Web Web Portal WebAAA
17-30 Configuring AAA for Network Users
Afterauthenticationandauthorizationarecomplete,theweb‐portal‐mycorpusernameis
replacedwiththeusernameenteredbytheWebAAAuserduringlogin.Thefollowingexample
showssessi o n informationforthesameuser,butaftertheuserisauthorizedtoaccessresourceson
thenetwork:
RBT-8100# show sessions network ssid mycorp
User Sess IP or MAC VLAN Port/
Name ID Address Name Radio
------------------------------ ---- ----------------- --------------- -----
alice 4* 192.168.12.101 corpvlan 3/1
bob 5* 192.168.12.102 corpvlan 3/1
2 sessions total
Using a Custom Login Page
Bydefault,MSSservestheEnterasysNetworksloginpageforWeblogin.
Toserveacustompageinstead,dothefollowing:
1. CopyandmodifytheEnterasyspage,orcreateanewpage.
2. CreateasubdirectoryintheuserfilesareaoftheRoamAboutswitch’snonvolatilestorage,and
copythecustompageinto
thesubdirectory.
3. ConfigureSSIDsandwiredauthenticationportstousethecustomform,byspecifyingthe
locationoftheform.
MSSusesthefollowingprocesstofindtheloginpagetoservetoauser:
•IftheuserisattemptingtoaccessanSSIDandacustompageisspecifiedinthe
serviceprofile,
MSSservesthecustompage.
•Iftheswitch’snonvolatilestoragehasapageinwebnamedwba_form.html(web/wba_form.html),
MSSservesthispage.Thisappliestoallwiredauthenticationusers.Thewba_form.htmlpage
alsoisservedtoSSIDusersiftheSSID’sserviceprofiledoesnotspecifyacustom
page.
•Ifthereisnowba_form.htmlpageandnocustompageintheserviceprofile(foranSSID),MSS
servesthedefaultpage.
Note: To serve a custom login page to wired authentication users, you must create a web
subdirectory and save the custom page in this directory.