Page 746 / 757 Scroll up to view Page 741 - 745
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
742
config wac ports
aging_time
- A time period during which an authenticated host will keep in authenticated
state. “infinite” indicates never to age out the authenticated host on the port
idle_time
- If there is no traffic during idle time, the host will be moved back to
unauthenticated state. “infinite” indicates never to check the idle state of the authenticated
host on the port.
block_time
- If a host fails to pass the authentication, it will be blocked for a period specified
by “block_time”.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To config state and other parameters of the ports:
DGS-3627:admin# config wac ports 1-9 state enable
Command: config wac ports 1-9 state enable
Success.
DGS-3627:admin#
config wac method
Purpose
Used to configure WAC auth method.
Syntax
config wac method [local | radius]
Description
The config wac radius_protocol command allows you to specify the RADIUS protocol used by
WAC to complete RADIUS authentication.
WAC shares other RADIUS configuration with 802.1x, when using this command to set the
RADIUS protocol, you must make sure the RASIUS server added by “config radius …”
command supports the protocol.
Parameters
local
- The authentication will be done via the local database.
radius
- The authentication will be done via the RADIUS server.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To configure WAC auth method:
DGS-3627:admin# config wac method radius
Command: config wac method radius
Success.
DGS-3627:admin#
config wac default_redirpath
Purpose
Used to config WAC default redirect URL.
Syntax
config wac default_redirpath <string 128>
Description
If default redirect path is configured, the user will be redirected to the default redirect path
after successful authentication.
When the string is cleared, the client will not be redirected to another URL after successful
Page 747 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
743
config wac default_redirpath
authentication.
Parameters
string
- The URL that the client will be redirected to after successful authentication. By
default, the redirected path is cleared
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To config WAC default redirect URL:
DGS-3627:admin# config wac default_redirpath http://www.dlink.com
Command: config wac default_redirpath http://www.dlink.com
Success.
DGS-3627:admin#
config wac clear_default_redirpath
Purpose
Used to clear WAC default redirect URL.
Syntax
config wac clear_default_redirpath
Description
When the string is cleared, the client will not be redirected to another URL after successful
authentication.
Parameters
None.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To clear WAC default redirect URL:
DGS-3627:admin# config wac clear_default_redirpath
Success.
DGS-3627:admin#
config wac virtual_ip
Purpose
Used to config the virtual IP address for WAC.
Syntax
config wac virtual_ip { < ipaddr > | < ipv6addr > } (1)
Description
The virtual IP of WAC is used to accept authentication request from unauthenticated host.
Only requests sent to this IP will get response correctly.
This IP does not respond to ARP request or ICMP packet!
Parameters
ipaddr
- To specify the IP address of the virtual IP.
ipv6addr
- To specify the IPv6 address of the virtual IP.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
Set IPv4 virtual IP address:
Page 748 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
744
DGS-3627:admin# config wac virtual_ip 1.1.1.1
Command: config wac virtual_ip 1.1.1.1
Success.
DGS-3627:admin#
Set IPv6 virtual IP address:
DGS-3627:admin# config wac virtual_ip 30::20
Command: config wac virtual_ip 30::20
Success.
DGS-3627:admin#
config wac switch_http_port
Purpose
Used to config HTTP(s) port of the switch used by WAC.
Syntax
config wac switch_http_port < tcp_port_number 1-65535> { [ http | https ] }
Description
The TCP port for HTTP or HTTPs is used to identify the HTTP or HTTPs packets
That will be trapped to CPU for authentication processing, or to access the login page.
If not specified, the default port number for HTTP is 80, and the default port number for
HTTPS is 443.
If no protocol specified, the protocol is HTTP.
The HTTP cannot run at TCP port 443, and the HTTPS cannot run at TCP port 80.
Parameters
tcp_port_number
- A TCP port which the WAC Switch listens to and uses to finish the
authenticating process. The range of port number is 1-65535.
http
- To specify the WAC runs HTTP protocol on this TCP port
https
- To specify the WAC runs HTTPS protocol on this TCP port
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To config HTTP(s) port of the switch used by WAC:
Used to config HTTP(s) port of the switch used by WAC.
DGS-3627:admin# config wac switch_http_port 8888 http
Command: config wac switch_http_port 8888 http
Success.
DGS-3627:admin#
create wac user
Purpose
Used to create a WAC local user.
Syntax
create wac user <username 15> {[vlan <vlan_name 32> | vlanid <vlanid 1-4094>]}
Description
The create wac user command allows you to create account for web-base access control.
This user account is independent with login user account.
If VLAN is not specified, the user will not get a VLAN assigned after the authentication.
Parameters
username
- User account for web-base access control.
vlan
- Authentication VLAN name.
Page 749 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
745
create wac user
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To create a WAC local user:
DGS-3627:admin# create wac user vlan Jim
Command: create wac user vlan Jim
Enter a case-sensitive new password:**
Enter the new password again for confirmation:**
Success.
DGS-3627:admin#
delete wac user
Purpose
Used to delete a WAC local user.
Syntax
delete wac [user <username 15> | all_users]
Description
The delete wac user command deletes WAC users from the local DB.
Parameters
user
- To specify the user name to be deleted
all_users
- All user accounts in local DB will be deleted.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To delete a WAC local user:
DGS-3627:admin# delete wac user 123
Command: delete wac user 123
Success.
DGS-3627:admin#
config wac user
Purpose
Used to configure WAC local user.
Syntax
config wac user <username 15> [vlan <vlan_name 32> | vlanid <vlanid 1-4094> |
clear_vlan]
Description
The config wac user command updates the local user DB. Only created user can be
configured
Parameters
username
- The user name to be configured
vlanid
- Target VLAN ID for authenticated host which uses this user account to pass
authentication
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To configure WAC local user:
Page 750 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
746
DGS-3627:admin# config wac user Jim vlan 3
Command: config wac user Jim vlan 3
Enter a case-sensitive new password:***
Enter the new password again for confirmation:***
Success.
DGS-3627:admin#
config wac authorization attributes
Purpose
The enable authorization command will enable acceptation of authorized configuration.
Syntax
config wac authorization attributes {radius [enable| disable] | local [enable |
disable]}(1)
Description
Used to enable or disable acceptation of authorized configuration.
When the authorization is enabled for WAC’s radius, the authorized data assigned by the
RADUIS server will be accepted if the global authorization network is enabled.
When the authorization is enabled for WAC’s local, the authorized data assigned by the local
database will be accepted.
Parameters
radius
- If specified to enable, the authorized data assigned by the RADUIS server will be
accepted if the global authorization network is enabled. The default state is enabled.
local
- If specified to enable, the authorized data assigned by the local database will be
accepted if the global authorization network is enabled. The default state is enabled.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
The enable authorization command will enable acceptation of authorized configuration:
DGS-3627:admin# config wac authorization attributes local disable
Command: config wac authorization attributes local disable
Success.
DGS-3627:admin#
show wac
Purpose
Used to display web authentication global setting.
Syntax
show wac
Description
This command allows the user to display the WAC global setting.
Parameters
None.
Restrictions
None.
Example usage:
Show global configuration about WAC:

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top