User's Manual

Chapter 17 Captive Portal
NXC CLI Reference Guide
115
17.1.1.2 web-auth policy Sub-commands
The following table describes the sub-commands for several web-auth policy commands. Note
that not all rule commands use all the sub-commands listed here.
17.1.1.3 Web Authentication Policy Insert Command Example
Here is an example of using a custom login page from an external web portal for web
authentication. The following commands:
• Turn on web authentication
• Set the NXC to use the authentication profile named AuthProfile1
• Set www.login.com as the login web page through which users authenticate their
connections
• Have the NXC use a custom login page from an external web portal instead of the default
one built into the NXC
• Create web-auth policy 1
[no] session-url <url> Sets the session page’s URL; for example: http://192.168.1.1/session.cgi.
192.168.1.1 is the web server on which the web portal files are installed.
[no] welcome-url <url> Sets the welcome page’s URL; for example: http://192.168.1.1/welcome.cgi.
192.168.1.1 is the web server on which the web portal files are installed
Table 52 web-auth login setting Sub-commands (continued)
COMMAND DESCRIPTION
Table 53 web-auth policy Sub-commands
COMMAND DESCRIPTION
[no] activate Activates the specified condition. The no command deactivates the
specified condition.
[no] authentication {force |
required}
Selects the authentication requirement for users with traffic matching
this policy. The no command requires no user authentication.
force: Users need to be authenticated. The NXC automatically
displays the login screen if unauthenticated users try to send HTTP
traffic.
required: Users need to be authenticated. They must manually go to
the login screen. The NXC does not redirect them to the login screen.
[no] description description Sets the description for the specified condition. The
no command
clears the description.
description: You can use alphanumeric and
()+/:=?!*#@$_%-
characters, and it can be up to 61 characters long.
[no] destination
address_object
Sets the destination criteria for the specified condition. The
no
command removes the destination criteria, making the condition
effective for all destinations.
[no] force Forces users that match the specified condition to log into the NXC.
The
no command means users matching the specified condition do not
have to log into the NXC.
[no] schedule schedule_name Sets the time criteria for the specified condition. The
no command
removes the time criteria, making the condition effective all the time.
[no] source address_object Sets the source criteria for the specified condition. The
no command
removes the source criteria, so all sources match the condition.
[no] ssid_profile
{ssid_profile}
Sets the SSID profile criteria for the specified condition. The
no
command removes the SSID profile criteria.
show Displays information about the specified condition.