Web Authentication Customizable Web Pages During the web-based authentication process, the switch internal HTTP server hosts four HTML pages to deliver to an authenticating client. The server uses these pages to notify you of these four-authentication process states: • Login—Your credentials are requested. • Success—The login was successful. • Fail—The login failed. • Expire—The login session has expired because of excessive login failures. Guidelines • You can substitute your own HTML pages for the default internal HTML pages. • You can use a logo or specify text in the login , success , failure , and expire web pages. • On the banner page, you can specify text in the login page.
• The pages are in HTML. • You must include an HTML redirect command in the success page to access a specific URL. • The URL string must be a valid URL (for example, http://www.cisco.com). An incomplete URL might cause page not found or similar errors on a web browser. • If you configure web pages for HTTP authentication, they must include the appropriate HTML commands (for example, to set the page time out, to set a hidden password, or to confirm that the same page is not submitted twice). The custom page samples in the webauth bundle are provided with the image and the details of what you can and cannot change.
• The CLI command to redirect users to a specific URL is not available when the configured login form is enabled. The administrator should ensure that the redirection is configured in the web page. • If the CLI command redirecting users to specific URL after authentication occurs is entered and then the command configuring web pages is entered, the CLI command redirecting users to a specific URL does not take effect. • Configured web pages can be copied to the switch boot flash or flash. • On stackable switches, configured pages can be accessed from the flash on the active switch or member switches.
• The login page can be on one flash, and the success and failure pages can be another flash (for example, the flash on the active switch or a member switch). • You must configure all four pages. • All of the logo files (image, flash, audio, video, and so on) that are stored in the system directory (for example, flash, disk0, or disk) and that are displayed on the login page must use web_auth_ as the file name. • The configured authentication proxy feature supports both HTTP and SSL. Web-Based Authentication Web Authentication Customizable Web Pages Web-Based Authentication 7