• For a URL redirect ACL: • Packets that match a permit access control entry (ACE) rule are sent to the CPU for forwarding to the AAA server. • Packets that match a deny ACE rule are forwarded through the switch. • Packets that match neither the permit ACE rule or deny ACE rule are processed by the next dACL, and if there is no dACL, the packets hit the implicit-deny ACL and are dropped. Configuring the Authentication Rule and Interfaces Follow these steps to configure the authentication rule and interfaces: Before you begin SISF-Based device tracking is a prerequisite to Web Authentication. Ensure that you have enabled device tracking programmatically or manually.
For more information, see Confguring SISF-Based Tracking . Procedure Web-Based Authentication Configuring the Authentication Rule and Interfaces Command or Action Purpose Step 1 enable Example: Device> enable Enables privileged EXEC mode. • Enter your password if prompted. Step 2 configure terminal Example: Device# configure terminal Enters global configuration mode. Step 3 ip admission name name proxy http Example: Device(config)# ip admission name webauth1 proxy http Configures an authentication rule for web-based authorization. Step 4 interface type slot/port Example:
Device(config)# interface gigabitethernet 1/0/1 Enters interface configuration mode and specifies the ingress Layer 2 or Layer 3 interface to be enabled for web-based authentication. type can be FastEthernet, GigabitEthernet, or TenGigabitEthernet. Web-Based Authentication 12