H3C Technologies H3C S3600 Series Switches - Manual (Page 557)

1-2
z Web authentication can use only a RADIUS authentication scheme; it does not support local
authentication.
z The user number limit configured under an AAA scheme does not take effect for Web
authentication. Web authentication does not support accounting. Configure accounting for the AAA
scheme as optional.
Configuring Web Authentication
Follow these steps to configure Web authentication:
To do… Use the command… Remarks
Enter system view system-view —
Set the IP address and port
number of the Web
authentication server web-authentication
web-server ip ip-address
[ port port-number ]
Required
If no port number is specified,
port 80 will be used.
No Web authentication server
is set by default.
Enable Web authentication
globally
web-authentication enable
Required
Disabled globally by default
interface interface-type
interface-number
web-authentication select
method { shared |
designated } Enable Web authentication on
a port
quit
Required
Disabled on port by default
Set a free IP address range that
can be accessed by users
before Web authentication web-authentication free-ip
ip-address { mask-length |
mask }
Optional
No such address range by
default
Set an authentication-free user
web-authentication free-user
ip ip-address mac
mac-address
Optional
No such user by default
Forcibly log out the specified or
all users.
web-authentication cut
connection { all | mac
mac-address | user-name
user-name | interface
interface-type
interface-number }
Optional
Set the idle user checking
interval for Web authentication web-authentication timer
idle-cut timer Optional
900 seconds by default
Set the maximum online time
for Web authentication users web-authentication timer
max-online timer Optional
1800 seconds by default
Set the maximum number of
online Web authentication web-authentication
max-connection number Optional
128 users by default on a port,