1-3z Before enabling global Web authentication, you should first set the IP address of a Webauthentication server.z Web authentication cannot be enabled when one of the following features is enabled, and viceversa: 802.1x, MAC authentication, port security, port aggregation and IRF.z You can make Web authentication settings on individual ports before Web authentication isenabled globally, but they will not take effect. The Web authentication settings on ports take effectimmediately once you enable Web authentication globally.z A Web authentication client and the switch with Web authentication enabled must be able tocommunicate at the network layer so that the Web authentication page can be displayed on theWeb authentication client.z Web authentication is mutually exclusive with functions that depend on ACLs such as IP filtering,ARP intrusion detection, QoS, and port binding.z After a user gets online in shared access method, if you configure an authentication-free userwhose IP address and MAC address are the same as those of the online user, the online user willbe forced to get offline.Displaying and Maintaining Web AuthenticationTo do… Use the command… RemarksDisplay global and port Webauthentication configurationinformationdisplay web-authenticationconfigurationDisplay information about specifiedor all online Web-authenticationusers.display web-authenticationconnection { all | interfaceinterface-type interface-number |user-name user-name }Available in anyviewWeb Authentication Configuration ExampleNetwork requirementsAs shown in Figure 1-1, a user connects to the Ethernet switch through port GigabitEthernet 1/0/1.z Configure the DHCP server so that users can obtain IP addresses from it.z Configure Web authentication on GigabitEthernet 1/0/1 to control the access of the user to theInternet.z Configure a free IP address range, which can be accessed by the user before it passes the Webauthentication.
