Dell PowerConnect W-IAP Remote Configuration Guide - Page 1349

Chapter Configuring Web Authentication 37 Table 231 lists individual Dell PowerConnect switches and the Web Authentication features they support. TABLE 231 Supported Web Authentication features Feature PowerConnect B-Series FCX Enabling and disabling Web Yes Authentication Configuring the Web Authentication Yes mode Web Authentication options in this Yes chapter Overview Authentication is important in enterprise networks because the network is considered a secure area: it contains sensitive data and a finite amount of resources. Unauthorized users must be prevented from accessing the network to protect the sensitive data and prevent the unnecessary consumption of resources. The ideal authentication method blocks unauthorized users at the earliest possible opportunity. For internal enterprise networks, this can be controlled at the edge switch port. Two popular forms of port-based security authentication used at the edge switch are multi-device port authentication and 802.1x. Multi-device port authentication authenticates the MAC addresses of hosts or users that are attempting to access the network. This type of authentication requires no intervention from the host or user who is attempting to be authenticated. It is easy to use, but it can only authorize hosts; it cannot be used to authorize users. 802.1x authentication can authorize users or hosts. It is more flexible than the multi-device port authentication method; however, it requires more support, configuration, maintenance and user intervention than multi-device port authentication. The Dell Web authentication method provides an ideal port-based authentication alternative to multi-device port authentication without the complexities and cost of 802.1x authentication. Hosts gain access to the network by opening a Web browser and entering a valid URL address using HTTP or HTTPS services. Instead of being routed to the URL, the host browser is directed to an authentication Web page on the PowerConnect switch. The Web page prompts the host to enter a user ID and password or a passcode. The credentials a host enters are used by a trusted source to authenticate the host MAC address. (Multiple MAC addresses can be authenticated with the same user name and password.) If the authentication is unsuccessful, the appropriate page is displayed on the host browser. The host is asked to try again or call for assistance, depending on what message is configured on the Web page. If the host MAC address is authenticated by the trusted source, a Web page is displayed with a hyperlink to the URL the host originally entered. If the user clicks on the link, a new window is opened and the the user is directed to the requested URL. PowerConnect B-Series FCX Configuration Guide 53-1002266-01 1307