HTTP and HTTPS Authentication

• 1 HTTP and HTTPS
  • 1.1 Web Authentication Overview
  • 1.2 Captive Portal Authentication (External Web Authentication)
    • 1.2.1 Captive Portal Profile for External Web Authentication
    • 1.2.2 Captive Portal on a VLAN
    • 1.2.3 Dynamic IP ACLs in Web Authentication
    • 1.2.4 Configuration Considerations for Applying IP ACLs
    • 1.2.5 Dynamically Applying Existing ACLs
    • 1.2.6 RADIUS Attribute for Session Timeout
  • 1.3 Web Authentication Configuration Considerations
  • 1.4 Web Authentication Configuration Tasks
  • 1.5 Prerequisites for Captive Portal Support with RUCKUS Cloudpath
  • 1.6 Prerequisites for Configuring Captive Portal with Aruba ClearPass
  • 1.7 Prerequisites for Configuring External Web Authentication with Cisco ISE
  • 1.8 Prerequisite Configurations on an ICX Switch for Captive Portal Authentication
  • 1.9 Creating the Captive Portal Profile for External Web Authentication
  • 1.10 Configuring Captive Portal (External Web Authentication)
  • 1.11 Enabling and Disabling Web Authentication
  • 1.12 Web Authentication Mode Configuration
    • 1.12.1 Using Local User Databases
      • 1.12.1.1 Configuring a Local User Database
      • 1.12.1.2 Creating a Local User Database
      • 1.12.1.3 Adding a User Record to a Local User Database
      • 1.12.1.4 Deleting a User Record from a Local User Database
      • 1.12.1.5 Deleting All User Records from a Local User Database
      • 1.12.1.6 Creating a Text File of User Records
      • 1.12.1.7 Importing a Text File of User Records from a TFTP Server
      • 1.12.1.8 Using a RADIUS Server as the Web Authentication Method
      • 1.12.1.9 Setting the Local User Database Authentication Method
      • 1.12.1.10 Setting the Web Authentication Failover Sequence
      • 1.12.1.11 Assigning a Local User Database to a Web Authentication VLAN
    • 1.12.2 Passcodes for User Authentication
      • 1.12.2.1 Configuring Passcode Authentication
      • 1.12.2.2 Creating Static Passcodes
      • 1.12.2.3 Enabling Passcode Authentication
      • 1.12.2.4 Configuring the Length of Dynamically Generated Passcodes
      • 1.12.2.5 Configuring the Passcode Refresh Method
      • 1.12.2.6 Configuring a Grace Period for an Expired Passcode
      • 1.12.2.7 Flushing All Expired Passcodes that Are in the Grace Period
      • 1.12.2.8 Disabling and Re-enabling Passcode Logging
      • 1.12.2.9 Resending the Passcode Log Message
      • 1.12.2.10 Manually Refreshing the Passcode
    • 1.12.3 Automatic Authentication
  • 1.13 Web Authentication Options
    • 1.13.1 Enabling RADIUS Accounting for Web Authentication
    • 1.13.2 Changing the Login Mode (HTTPS or HTTP)
    • 1.13.3 Specifying Trusted Ports
    • 1.13.4 Specifying Hosts that Are Permanently Authenticated
    • 1.13.5 Configuring the Re-authentication Period
    • 1.13.6 Defining the Web Authentication Cycle
    • 1.13.7 Limiting the Number of Web Authentication Attempts
    • 1.13.8 Clearing Authenticated Hosts from the Web Authentication Table
    • 1.13.9 Setting and Clearing the Block Duration for Web Authentication Attempts
    • 1.13.10 Manually Blocking and Unblocking a Specific Host
    • 1.13.11 Limiting the Number of Authenticated Hosts
    • 1.13.12 Filtering DNS Queries
    • 1.13.13 Forcing Re-authentication When Ports Are Down
    • 1.13.14 Forcing Re-authentication After an Inactive Period
    • 1.13.15 Defining the Web Authorization Redirect Address
    • 1.13.16 Deleting a Web Authentication VLAN
    • 1.13.17 Web Authentication Pages
      • 1.13.17.1 Displaying Text for Web Authentication Pages
      • 1.13.17.2 Customizing Web Authentication Pages
  • 1.14 Image Download over HTTPS
  • 1.15 Configuration Download over HTTPS
  • 1.16 Configuration Upload over HTTPS
  • 1.17 Displaying Web Authentication Information
    • 1.17.1 Displaying the Web Authentication Configuration
    • 1.17.2 Displaying a List of Authenticated Hosts
    • 1.17.3 Displaying a List of Hosts Attempting to Authenticate
    • 1.17.4 Displaying a List of Blocked Hosts
    • 1.17.5 Displaying a List of Local User Databases
    • 1.17.6 Displaying a List of Users in a Local User Database
    • 1.17.7 Displaying Passcodes
    • 1.17.8 Displaying Captive Portal Profile Details