9.2.2 View Web credentials settings

You can use the show web-authentication command to display the Web authentication configuration.

<Structure of this section>

(1) When the authentication method is RADIUS in fixed VLAN mode

Figure 9-11: View Web authentications (fixed VLAN mode RADIUS credentials)
# show web-authentication Date 20XX/10/17 10:52:49 UTC web-authentication Information: Authentic-mode : Static-VLAN Authentic-method : RADIUS Accounting-state : disable Dead-interval : 10 Max-timer : 60 Max-user : 256 VLAN Count : - Auto-logout : - Syslog-send : enable Alive-detection : enable timer : 60 interval-timer : 3 count : 3 URL-redirect : enable Protocol : http Jump-URL : http://www.example.com/ Web-IP-address : 10.10.10.1 FQDN : aaa.example.com Web-port : http : 80, 8080 https : 443, 8443 ARP-relay Port : 0/1-2 Force-Authorized : disable Auth-max-user : 1024 Port : 0/1 VLAN ID : 5,10,15 Access-list-No: 100 Max-user : 64 Port : 0/2 VLAN ID : 15-16 Access-list-No: 100 Max-user : 64

Figure 9-11: View Web authentications (fixed VLAN mode RADIUS credentials)

# show web-authentication
Date 20XX/10/17 10:52:49 UTC
web-authentication Information:
   Authentic-mode   : Static-VLAN
   Authentic-method : RADIUS        Accounting-state : disable
   Dead-interval    : 10
          Max-timer : 60                   Max-user  : 256
         VLAN Count : -                  Auto-logout : -
   Syslog-send      : enable
   Alive-detection  : enable
              timer : 60    interval-timer : 3     count : 3
   URL-redirect     : enable    Protocol : http
   Jump-URL         : http://www.example.com/
   Web-IP-address   : 10.10.10.1
   FQDN             : aaa.example.com
   Web-port         : http  : 80, 8080       https : 443, 8443
   ARP-relay Port   : 0/1-2
   Force-Authorized : disable
   Auth-max-user    : 1024
 
         Port          :    0/1
         VLAN ID       :    5,10,15
         Access-list-No:    100
         Max-user      :    64
 
         Port          :    0/2
         VLAN ID       :    15-16
         Access-list-No:    100
         Max-user      :    64

(2) Dynamic VLAN mode with local authentication as the authentication method

Figure 9-12: Show Web credentials settings (local authentication in dynamic VLAN)
# show web-authentication Date 20XX/10/17 10:52:49 UTC web-authentication Information: Authentic-mode : Dynamic-VLAN Authentic-method : Local Accounting-state : disable Dead-interval : 10 Max-timer : 60 Max-user : 256 VLAN Count : - Auto-logout : disable Syslog-send : enable URL-redirect : enable Protocol : http Jump-URL : http://www.example.com/ Web-IP-address : 192.168.1.1 FQDN : aaa.example.com Web-port : http : 80, 8080 https : 443, 8443 ARP-relay Port : 0/10,12 Force-Authorized : enable Auth-max-user : 1024 Port : 0/10 VLAN ID : 1000,1500 Native VLAN : 10 Forceauth VLAN: 1000 Access-list-No: 100 Max-user : 64 Port : 0/12 VLAN ID : 1000,1500 Native VLAN : 10 Forceauth VLAN: 1000 Access-list-No: 100 Max-user : 64

Figure 9-12: Show Web credentials settings (local authentication in dynamic VLAN)

# show web-authentication
Date 20XX/10/17 10:52:49 UTC
web-authentication Information:
   Authentic-mode   : Dynamic-VLAN
   Authentic-method : Local         Accounting-state : disable
   Dead-interval    : 10
          Max-timer : 60                   Max-user  : 256
         VLAN Count : -                  Auto-logout : disable
   Syslog-send      : enable
   URL-redirect     : enable    Protocol : http
   Jump-URL         : http://www.example.com/
   Web-IP-address   : 192.168.1.1
   FQDN             : aaa.example.com
   Web-port         : http  : 80, 8080       https : 443, 8443
   ARP-relay Port   : 0/10,12
   Force-Authorized : enable
   Auth-max-user    : 1024
 
         Port          :    0/10
         VLAN ID       :    1000,1500
         Native VLAN   :    10
         Forceauth VLAN:    1000
         Access-list-No:    100
         Max-user      :    64
 
         Port          :    0/12
         VLAN ID       :    1000,1500
         Native VLAN   :    10
         Forceauth VLAN:    1000
         Access-list-No:    100
         Max-user      :    64

(3) In dynamic VLAN mode, the authentication method is RADIUS.

Figure 9-13: Displaying Web authentication configuration information (dynamic VLAN mode RADIUS authentication)
# show web-authentication Date 20XX/10/17 10:52:49 UTC web-authentication Information: Authentic-mode : Dynamic-VLAN Authentic-method : RADIUS Accounting-state : enable Dead-interval : 10 Max-timer : 60 Max-user : 256 VLAN Count : - Auto-logout : disable Syslog-send : enable URL-redirect : enable Protocol : http Jump-URL : http://www.example.com/ Web-IP-address : 192.168.1.1 FQDN : aaa.example.com Web-port : http : 80, 8080 https : 443, 8443 ARP-relay Port : 0/10,12 Force-Authorized : enable Auth-max-user : 1024 Port : 0/10 VLAN ID : 1000,1500 Native VLAN : 10 Forceauth VLAN: 1000 Access-list-No: 100 Max-user : 256 Port : 0/12 VLAN ID : 1000,1500 Native VLAN : 10 Forceauth VLAN: - Access-list-No: 100 Max-user : 256

Figure 9-13: Displaying Web authentication configuration information (dynamic VLAN mode RADIUS authentication)

# show web-authentication
Date 20XX/10/17 10:52:49 UTC
web-authentication Information:
   Authentic-mode   : Dynamic-VLAN
   Authentic-method : RADIUS        Accounting-state : enable
   Dead-interval    : 10
          Max-timer : 60                   Max-user  : 256
         VLAN Count : -                  Auto-logout : disable
   Syslog-send      : enable
   URL-redirect     : enable    Protocol : http
   Jump-URL         : http://www.example.com/
   Web-IP-address   : 192.168.1.1
   FQDN             : aaa.example.com
   Web-port         : http  : 80, 8080       https : 443, 8443
   ARP-relay Port   : 0/10,12
   Force-Authorized : enable
   Auth-max-user    : 1024
 
         Port          :    0/10
         VLAN ID       :    1000,1500
         Native VLAN   :    10
         Forceauth VLAN:    1000
         Access-list-No:    100
         Max-user      :    256
 
         Port          :    0/12
         VLAN ID       :    1000,1500
         Native VLAN   :    10
         Forceauth VLAN:    -
         Access-list-No:    100
         Max-user      :    256

(4) If VLAN is registered in legacy mode and the authentication method is local authentication:

Figure 9-14: View Web Authentications Settings (Local Authentication)
# show web-authentication Date 20XX/10/17 10:52:49 UTC web-authentication Information: Authentic-mode : Legacy Authentic-method : Local Accounting-state : disable Max-timer : 60 Max-user : 256 VLAN Count : 16 Auto-logout : disable Syslog-send : enable Jump-URL : http://www.example.com/ Web-port : http : 80 https : 443 VLAN Information: VLAN ID : 5,10,15,20,25,30,35,40,1000-1007

Figure 9-14: View Web Authentications Settings (Local Authentication)

# show web-authentication
Date 20XX/10/17 10:52:49 UTC
web-authentication Information:
   Authentic-mode   : Legacy
   Authentic-method : Local         Accounting-state : disable
          Max-timer : 60                   Max-user  : 256
         VLAN Count : 16                 Auto-logout : disable
   Syslog-send      : enable 
   Jump-URL         : http://www.example.com/
   Web-port         : http  : 80             https : 443
 
VLAN Information:
            VLAN ID :    5,10,15,20,25,30,35,40,1000-1007

(5) When VLAN is registered in legacy mode and the authentication method is RADIUS authentication

Figure 9-15: View Web Authentications Settings (RADIUS Authentication)
# show web-authentication Date 20XX/10/17 10:52:49 UTC web-authentication Information: Authentic-mode : Legacy Authentic-method : RADIUS Accounting-state : disable Max-timer : 60 Max-user : 256 VLAN Count : 16 Auto-logout : disable Syslog-send : enable Jump-URL : http://www.example.com/ Web-port : http : 80 https : 443 VLAN Information: VLAN ID : 5,10,15,20,25,30,35,40,1000-1007

Figure 9-15: View Web Authentications Settings (RADIUS Authentication)

# show web-authentication
Date 20XX/10/17 10:52:49 UTC
web-authentication Information:
   Authentic-mode   : Legacy
   Authentic-method : RADIUS        Accounting-state : disable
          Max-timer : 60                   Max-user  : 256
         VLAN Count : 16                 Auto-logout : disable
   Syslog-send      : enable 
   Jump-URL         : http://www.example.com/
   Web-port         : http  : 80             https : 443
 
VLAN Information:
            VLAN ID :    5,10,15,20,25,30,35,40,1000-1007