Defaults
Web authentication is disabled.
Command Modes
Global configuration
Command History
Release
12.2(35)SE
Usage Guidelines
The ip admission name proxy http command globally enables web authentication on a switch.
After you enable web authentication on a switch, use the ip access-group in and ip admission web-rule
interface configuration commands to enable web authentication on a specific interface.
Examples
This example shows how to configure only web authentication on a switchport:
Switch# configure terminal
Switch(config) ip admission name http-rule proxy http
Switch(config)# interface gigabitethernet1/0/1
Switch(config-if)# ip access-group 101 in
Switch(config-if)# ip admission rule
Switch(config-if)# end
This example shows how to configure IEEE 802.1x authentication with web authentication as a fallback
mechanism on a switchport.
Switch# configure terminal
Switch(config)# ip admission name rule2 proxy http
Switch(config)# fallback profile profile1
Switch(config)# ip access group 101 in
Switch(config)# ip admission name rule2
Switch(config)# interface gigabitethernet1/0/1
Switch(config-if)# dot1x port-control auto
Switch(config-if)# dot1x fallback profile1
Switch(config-if)# end
Related Commands
Command
dot1x fallback
fallback profile
ip admission
show ip admission
show fallback profile
Use the show fallback profile privileged EXEC command to display the fallback profiles that are
configured on a switch.
OL-8918-03
Modification
This command was introduced.
Description
Configure a port to use web authentication as a fallback method for clients
that do not support IEEE 802.1x authentication.
Create a web authentication fallback profile.
Enable web authentication on a port
Displays information about NAC cached entries or the NAC configuration.
For more information, see the Network Admission Control Software
Configuration Guide on Cisco.com.
Release Notes for the Cisco Catalyst Blade Switch 3020 for HP, Cisco IOS Release 12.2(35)SE and Later
Documentation Updates
27
페이지 인쇄