H3C Technologies H3C S3600 Series Switches - Manual (Page 563)

1-8
Network diagram
Figure 1-1 Web authentication for user
Configuration procedure
# Perform DHCP-related configuration on the DHCP server. (It is assumed that the user will
automatically obtain an IP address through the DHCP server.)
# Set the IP address and port number of the Web authentication server.
system-view
[Switch] web-authentication web-server ip 10.10.10.10 port 8080
# Configure a free IP address range, so that the user can access free resources before it passes the
Web authentication.
[Switch] web-authentication free-ip 10.20.20.1 24
# Enable Web authentication on Ethernet 1/0/1 and set the user access method to designated.
[Switch] interface Ethernet 1/0/1
[Switch-Ethernet1/0/1] web-authentication select method designated
# Create RADIUS scheme radius1 and enter its view.
[Switch] radius scheme radius1
# Set the IP address of the primary RADIUS authentication server.
[Switch-radius-radius1] primary authentication 10.10.10.164
# Enable accounting optional.
[Switch-radius-radius1] accounting optional
# Set the password that will be used to encrypt the messages exchanged between the switch and the
RADIUS authentication server.
[Switch -radius-radius1] key authentication expert
# Configure the system to strip domain name off a user name before transmitting the user name to the
RADIUS server.
[Switch-radius-radius1] user-name-format without-domain
[Switch-radius-radius1] quit