H3C Technologies H3C S3100 Series Switches - Manual (Page 467)

1-2
z Web authentication can use only a RADIUS authentication scheme; it does not support local
authentication.
z The user number limit configured under an AAA scheme does not take effect for Web
authentication. Web authentication does not support accounting. Configure accounting for the AAA
scheme as optional.
Configuring Web Authentication
Follow these steps to configure Web authentication:
To do… Use the command… Remarks
Enter system view system-view —
Set the IP address and port
number of the Web authentication
server
web-authentication web-server
ip ip-address [ port port-number ]
Required
If no port number is specified, port
80 will be used.
No Web authentication server is
set by default.
Enable Web authentication
globally
web-authentication enable
Required
Disabled globally by default
interface interface-type
interface-number
web-authentication select
method { shared | designated |
extended } Enable Web authentication on a
port
quit
Required
Disabled on port by default
Set a free IP address range that
can be accessed by users before
Web authentication
web-authentication free-ip
ip-address { mask-length | mask } Optional
No such address range by default
Forcibly log out the specified or all
users.
web-authentication cut
connection { all | mac
mac-address | user-name
user-name | interface
interface-type interface-number }
Optional
Set the idle user checking interval
for Web authentication web-authentication timer
idle-cut timer Optional
900 seconds by default
Set the maximum online time for
Web authentication users web-authentication timer
max-online timer Optional
1800 seconds by default
Set the maximum number of online
Web authentication users on a port web-authentication
max-connection number Optional
128 users by default