Page 386 / 757 Scroll up to view Page 381 - 385
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
382
DGS-3627:admin# disable jwac
Command: disable jwac
Success.
DGS-3627:admin#
enable jwac redirect
Purpose
Used to enable JWAC redirect function.
Syntax
enable jwac redirect
Description
When redirecting quarantine server is specified, the unauthenticated host will be redirected to
quarantine server when it tries to access a random URL. When redirecting JWAC login page
is specified, the unauthenticated host will be redirected to JWAC login page in the Switch to
finish authentication.
When redirect is enabled, all the web accesses are redirect to quarantine server or JWAC
login page.
When redirecting to quarantine server is specified, a quarantine server must be configured
first before enabling JWAC globally.
Parameters
None.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To enable JWAC redirect function:
DGS-3627:admin# enable jwac redirect
Command: enable jwac redirect
Success.
DGS-3627:admin#
disable jwac redirect
Purpose
Used to disable JWAC redirect function.
Syntax
disable jwac redirect
Description
When redirect is disabled, all web accesses are denied except for accesses to quarantine
server or JWAC login page.
Parameters
None.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To disable JWAC redirect function:
DGS-3627:admin# disable jwac redirect
Command: disable jwac redirect
Success.
DGS-3627:admin#
Page 387 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
383
enable jwac forcible_logout
Purpose
Used to enable JWAC forcibly logout function.
Syntax
enable jwac forcible_logout
Description
When forcibly logout feature is enabled, a PING packet from an authenticated host to the
JWAC Switch with TTL=1 will be regarded as a logout request, and the host will be moved
back to unauthenticated state.
Parameters
None.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To enable JWAC forcibly logout function:
DGS-3627:admin# enable jwac forcible_logout
Command: enable jwac forcible_logout
Success.
DGS-3627:admin#
disable jwac forcible_logout
Purpose
Used to disable JWAC forcibly logout function.
Syntax
disable jwac forcible_logout
Description
When forcibly logout feature is disabled, even a PING packet from an authenticated host to
the JWAC Switch with TTL=1 will be ignored, and the host is still in an authenticated state.
Parameters
None.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To disable JWAC forcibly logout function:
DGS-3627:admin# disable jwac forcible_logout
Command: disable jwac forcible_logout
Success.
DGS-3627:admin#
enable jwac udp_filtering
Purpose
Used to enable or disable JWAC UDP filtering function.
Syntax
enable jwac udp_filtering
Description
When UDP filtering feature is enabled, all UDP and ICMP packets except for DHCP and DNS
packets from unauthenticated hosts will be dropped.
Parameters
None.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
Page 388 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
384
To enable JWAC UDP filtering function:
DGS-3627:admin# enable jwac udp_filtering
Command: enable jwac udp_filtering
Success.
DGS-3627:admin#
disable jwac udp_filtering
Purpose
Used to disable JWAC UDP filtering function.
Syntax
disable jwac udp_filtering
Description
When UDP filtering feature is disabled, all UDP and ICMP packets are permitted.
Parameters
None.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To disable JWAC UDP filtering function:
DGS-3627:admin# disable jwac udp_filtering
Command: disable jwac udp_filtering
Success.
DGS-3627:admin#
enable jwac quarantine_server_monitor
Purpose
Used to enable JWAC Quarantien Server monitor function.
Syntax
enable jwac quarantine_server_monitor
Description
When JWAC Quarantine Server monitor feature is enabled, the JWAC Switch will monitor the
Quarantine Server to ensure the server is OK. If the Switch detects no Quarantine Server, it
will redirect all unauthenticated HTTP accesses to JWAC Login Page forcibly if the redirect is
enabled and the redirect destination is configured to be Quarantine Server.
Parameters
None.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To enable JWAC Quarantine Server monitor function:
DGS-3627:admin# enable jwac quarantine_server_monitor
Command: enable jwac quarantine_server_monitor
Success.
DGS-3627:admin#
disable jwac quarantine_server_monitor
Purpose
Used to disable JWAC Quarantien Server monitor function.
Page 389 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
385
disable jwac quarantine_server_monitor
Syntax
disable jwac quarantine_server_monitor
Description
Disable JWAC Quarantine Server function enabled previously.
Parameters
None.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To disable Quarantine Server monitor function:
DGS-3627:admin# disable jwac quarantine_server_monitor
Command: disable jwac quarantine_server_monitor
Success.
DGS-3627:admin#
config jwac quarantine_server_error_timeout
Purpose
Used to set Quarantine Server error timeout.
Syntax
config jwac quarantine_server_error_timeout <sec 5-300>
Description
When Quarantine Server monitor is enabled, the JWAC Switch will periodically check if the
Quarantine works OK. If the Switch does not receive any response from Quarantine Server
during the configured error timeout, the Switch then regards it as working improperly.
Parameters
<sec 5-300>
- To specify the error timeout interval.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To set Quarantine Server error timeout:
DGS-3627:admin# config jwac quarantine_server_error_timeout 60
Command: config jwac quarantine_server_error_timeout 60
Success.
DGS-3627:admin#
config jwac redirect
Purpose
Used to configure redirect destination and delay time before an unauthenticated host is
redirect to Quarantine Server or JWAC login web page.
Syntax
config jwac redirect {destination [quarantine_server | jwac_login_page] | delay_time
<sec 0-10>} (1)
Description
This command allows you to configure redirect destination and delay time before an
unauthenticated host is redirected to Quarantine Server or the JWAC login web page.
0 means no delaying the redirect.
Parameters
destination
- To specify the destination which the unauthenticated host will be redirected to.
delay_time
- To specify the time period after which the unauthenticated host will be
redirected. Unit of this timer is second.
Restrictions
Only Administrator and Operator-level users can issue this command.
Page 390 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
386
Example usage:
To configure the redirect destination and delay time:
DGS-3627:admin# config jwac redirect destination jwac_login_page delay_time 5
Command: config jwac redirect_ destination jwac_login_page delay_time 5
Success.
DGS-3627:admin#
config jwac virtual_ip
Purpose
Used to configure JWAC virtual ipaddress to accept authentication requests from un-
authenticated hosts.
Syntax
config jwac virtual_ip <ipaddr> {url [<string 128> | clear]}
Description
The virtual IP of JWAC is used to accept authentication request from unauthenticated host.
Only requests sent to this IP will get response correctly.
This IP does not respond to ARP request or ICMP packet!
Parameters
<ipaddr>
- To specify the IP address of the virtual IP.
url
- This parameter is used to set the URL of virtual IP.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To configure virtual IP address to accept authentication request from host:
DGS-3627:admin# config jwac virtual_ip 1.1.1.1 url www.kyoto.ac.jp
Command: config jwac virtual_ip 1.1.1.1 url www.kyoto.ac.jp
Success.
DGS-3627:admin#
config jwac quarantine_server_url
Purpose
Used to configure JWAC Quarantine Server URL.
Syntax
config jwac quarantine_server_url <string 128>
Description
This command allows you to configure URL of Quarantine Server.
If the redirection is enabled and the redirection destination is Quarantine Server, when a
HTTP request from unauthenticated host which is not headed to Quarantine Server reaches
the Switch, the Switch will handle this HTTP packet and send back a message to the host to
make it access Quarantine Server with the configured URL
When the PC connected to the specified URL, the quarantine server will request the PC user
to input the user name and password to authenticate.
NOTE:
If the quarantine server is linked to the JWAC enabled port on the switch, it must be
added to the static FDB correctly before it can work properly.
Parameters
<string 128>
- To specify the entire URL of authentication page on Quarantine Server
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top