web-server

Usage Scenario

Mandatory web authentication is a function that enables the to redirect the access request of a user to the web server when a user accesses an unauthorized address before being authenticated, facilitating user authentication.

If homepage popup is configured and the web server support this function, when the user passes the web authentication, the web server refreshes the web page being browsing by the user to the homepage requested by the user before authentication. The user does not need to type this homepage again. If homepage popup is configured, when the user passes the web authentication, the user is forcibly redirected to the Portal page. To access the requested homepage, the user needs to type this homepage again.

If the mandatory web server is different from the web authentication server, the cannot identify whether the mandatory web server is Up or Down, but can identify whether the web authentication server is Up or Down. To enable the to identify whether the mandatory Web server is Up or Down based on the status of the web authentication server, you can run the web-server { <ip-address> | url <url> } [ bind web-auth-server <ip-address> [ vpn-instance <vpn-instance> ] ] command to bind the mandatory web server to the web authentication server.

If there are two web authentication servers in active/standby mode, after the mandatory web server is bound to the web authentication server, you can run the web-server { <ip-address> | url <url> } [ bind web-auth-server <ip-address> [vpn-instance <vpn-instance> ] ] slave command to configure the standby mandatory web server.

Precautions

This command is supported only on the admin VS.

• When you run the web-server command in the AAA domain view, check whether the web authentication server to which the active/standby server in IP mode is the same as that in URL mode. If they are different, you cannot run the web-server command.
• The active web server must be different from the standby Web server.
• To delete the web authentication server, you must remove the binding of the web authentication server.
• You must bind the web authentication server in the system view; otherwise, the binding fails.
• If the web-auth-server source interface interface-type interface-number command is not run in the system view, run the web-server redirect-key mscg-ip mscg-ip-key command and the web-server ip-address command in the AAA domain view. In this way, a source interface's route can be used as a customized parameter of this source interface when an IPv6 user switches between the authentication domain and pre-authentication domain.