3com 5500-ei pwr Installation Instruction

Page of 1072
 
1-3 
 
Before enabling global Web authentication, you should first set the IP address of a Web 
authentication server. 
Web authentication cannot be enabled when one of the following features is enabled, and vice 
versa: 802.1x, MAC authentication, port security, port aggregation and XRN. 
You can make Web authentication settings on individual ports before Web authentication is 
enabled globally, but they will not take effect. The Web authentication settings on ports take effect 
immediately once you enable Web authentication globally. 
A Web authentication client and the switch with Web authentication enabled must be able to 
communicate at the network layer so that the Web authentication page can be displayed on the 
Web authentication client. 
Web authentication is mutually exclusive with functions that depend on ACLs such as IP filtering, 
ARP intrusion detection, QoS, and port binding. 
After a user gets online in shared access method, if you configure an authentication-free user 
whose IP address and MAC address are the same as those of the online user, the online user will 
be forced to get offline.   
 
Displaying and Maintaining Web Authentication 
To do… 
Use the command… 
Remarks 
Display global and port Web 
authentication configuration 
information 
display web-authentication 
configuration 
Display information about specified 
or all online Web-authentication 
users. 
display web-authentication 
connection 
all | interface 
interface-type interface-number 
user-name user-name } 
Available in any 
view 
 
Web Authentication Configuration Example 
Network requirements 
As shown in 
, a user connects to the Ethernet switch through port Ethernet 1/0/1. 
Configure the DHCP server so that users can obtain IP addresses from it. 
Configure Web authentication on Ethernet 1/0/1 to control the access of the user to the Internet. 
Configure a free IP address range, which can be accessed by the user before it passes the Web 
authentication.