1-10Web Authentication Configuration ExampleNetwork requirementsAs shown in Figure 1-1, a user connects to the Ethernet switch through port Ethernet 1/0/1.z Configure the DHCP server so that users can obtain IP addresses from it.z Configure Web authentication on Ethernet 1/0/1 to control the access of the user to the Internet.z Configure a free IP address range, which can be accessed by the user before it passes the Webauthentication.Network diagramFigure 1-1 Web authentication for userEth 1/0/1 InternetUserDHCP server10.10.10.166/24Free resourceAuthentication server10.10.10.164/2410.20.20.1/24Configuration procedure# Perform DHCP-related configuration on the DHCP server. (It is assumed that the user willautomatically obtain an IP address through the DHCP server.)# Set the IP address and port number of the Web authentication server. system-view[Sysname] web-authentication web-server ip 10.10.10.10 port 8080# Configure a free IP address range, so that the user can access free resources before it passes theWeb authentication.[Sysname] web-authentication free-ip 10.20.20.1 24# Enable Web authentication on Ethernet 1/0/1 and set the user access method to designated.[Sysname] interface Ethernet 1/0/1[Sysname-Ethernet1/0/1] web-authentication select method designated# Create RADIUS scheme radius1 and enter its view.[Sysname] radius scheme radius1# Set the IP address of the primary RADIUS authentication server.[Sysname-radius-radius1] primary authentication 10.10.10.164# Enable accounting optional.[Sysname-radius-radius1] accounting optional# Set the password that will be used to encrypt the messages exchanged between the switch and theRADIUS authentication server.
