Home » Netgear Manuals » Hubs & Switches » Netgear GSM7224P » Manual Viewer

Netgear GSM7224P GSM5212P/GSM7212P/GSM7212F/GSM7224P Administration Manual - Page 508

Captive Portal Configuration, Enable Captive Portal

Add to My Manuals
Save this manual to your list of manuals

Page 508 highlights

ProSafe Managed Switch You can enable captive portal on all the physical ports on the switch. It is not supported for VLAN interfaces, loopback interfaces or logical interfaces. The captive portal feature uses MAC-aaddress based authentication and not port-based authentication. This means that all the clients connected to the captive portal interface must be authenticated before they can get access to the network. Clients connecting to the captive portal interface have three states; unknown, unauthenticated, and authenticated. • Unknown. In the unknown state, the captive portal does not redirect HTTP/S traffic to the switch, but instead asks the switch whether the client is authenticated or unauthenticated. • Unathenticated. The captive portal directs the HTTP/S traffic to the switch so that the client can authenticate with the switch. • Authenticated. After successful authentication, the client is placed in authenticated state. In this state, all the traffic emerging from the client is forwarded through the switch. Captive Portal Configuration This section introduces the objects that make up the captive portal and describes the interaction between the captive portal and the network administrator. It explains what configurations are visible to the network administrator and enumerates the events. All the configurations included in this section are managed using the CLI, the Web Interface, and SNMP, with one exception; to customize the captive portal Web page, you must use the Web Interface. The captive portal configuration provides the network administrator control over verification and authentication, assignment to interfaces, client sessions, and Web page customization. You can create multiple captive portal configuration instances. Each captive portal configuration contains various flags and definitions used to control client access and content to customize the user verification Web page. A captive portal configuration can be applied to one or more interfaces. An interface can only be a physical port on the switch. Software release 8.0 and newer versions can contain up to 10 captive portal configurations. Enable Captive Portal CLI: Enable Captive Portal 1. Enable captive portal on the switch. (Netgear Switch) (config)#captive-portal (Netgear Switch) (Config-CP)#enable 508 | Chapter 32. Captive Portal

Section	Page
ProSafe Managed Switch	1
Table of Contents	3
1. Documentation Resources	8
2. VLANs	9
Create Two VLANs	10
CLI: Create Two VLANS	10
Web Interface: Create Two VLANS	10
Assign Ports to VLAN2	12
CLI: Assign Ports to VLAN2	12
Web Interface: Assign Ports to VLAN2	12
Assign Ports to VLAN3	13
CLI: Assign Ports to VLAN3	13
Web Interface: Assign Ports to VLAN3	14
Assign VLAN3 as the Default VLAN for Port 1/0/2	15
CLI: Assign VLAN3 as the Default VLAN for Port 1/0/2	15
Web Interface: Assign VLAN3 as the Default VLAN for Port 1/0/2	15
Create a MAC-Based VLAN	16
CLI: Create a MAC-Based VLAN	16
Web Interface: Assign a MAC-Based VLAN	17
Create a Protocol-Based VLAN	19
CLI: Create a Protocol-Based VLAN	19
Web Interface: Create a Protocol-Based VLAN	20
Virtual VLANs: Create an IP Subnet–Based VLAN	21
CLI: Create an IP Subnet–Based VLAN	22
Web Interface: Create an IP Subnet–Based VLAN	23
Voice VLANs	24
CLI: Configure Voice VLAN and Prioritize Voice Traffic	25
Web Interface: Configure Voice VLAN and Prioritize Voice Traffic	27
3. LAG s	34
Create Two LAGs	35
CLI: Create Two LAGs	35
Web Interface: Create Two LAGs	35
Add Ports to LAGs	36
CLI: Add Ports to the LAGs	36
Web Interface: Add Ports to LAGs	37
Enable Both LAGs	38
CLI: Enable Both LAGs	38
Web Interface: Enable Both LAGs	38
4. Port Routing	39
Port Routing Configuration	40
Enable Routing for the Switch	41
CLI: Enable Routing for the Switch	41
Web Interface: Enable Routing for the Switch	41
Enable Routing for Ports on the Switch	41
CLI: Enable Routing for Ports on the Switch	42
Web Interface: Enable Routing for Ports on the Switch	42
Add a Default Route	44
CLI: Add a Default Route	44
Web Interface: Add a Default Route	44
Add a Static Route	45
CLI: Add a Static Route	45
Web Interface: Add a Static Route	46
5. VLAN Routing	47
Create Two VLANs	47
CLI: Create Two VLANs	48
Web Interface: Create Two VLANs	49
Set Up VLAN Routing for the VLANs and the Switch	52
CLI: Set Up VLAN Routing for the VLANs and the Switch	52
Web Interface: Set Up VLAN Routing for the VLANs and the Switch	53
6. RIP	54
Routing for the Switch	55
CLI: Enable Routing for the Switch	55
Web Interface: Enable Routing for the Switch	55
Routing for Ports	56
CLI: Enable Routing and Assigning IP Addresses for Ports 1/0/2 and 1/0/3	56
Web Interface: Enable Routing for the Ports	56
RIP for the Switch	57
CLI: Enable RIP on the Switch	57
Web Interface: Enableg RIP on the Switch	58
RIP for Ports 1/0/2 and 1/0/3	58
CLI: Enable RIP for Ports 1/0/2 and 1/0/3	58
Web Interface: Enable RIP for Ports 1/0/2 and 1/0/3	59
VLAN Routing with RIP	60
CLI: Configure VLAN Routing with RIP Support	60
Web Interface: Configure VLAN Routing with RIP Support	62
7. OSPF	64
Inter-area Router	65
CLI: Configure an Inter-area Router	65
Web Interface: Configure an Inter-area Router	67
OSPF on a Border Router	70
CLI: Configure OSPF on a Border Router	70
Web Interface: Configure OSPF on a Border Router	71
Stub Areas	75
CLI: Configure Area 1 as a Stub Area on A1	76
Web Interface: Configure Area 1 as a Stub Area on A1	77
CLI: Configure Area 1 as a Stub Area on A2	80
Web Interface: Configure Area 1 as a Stub Area on A2	81
nssa Areas	84
CLI: Configure Area 1 as an nssa Area	84
Web Interface: Configure Area 1 as an nssa Area on A1	85
CLI: Configure Area 1 as an nssa Area on A2	88
Web Interface: Configure Area 1 as an nssa Area on A2	90
VLAN Routing OSPF	93
CLI: Configure VLAN Routing OSPF	94
Web Interface: Configure VLAN Routing OSPF	95
OSPFv3	98
CLI: Configure OSPFv3	98
Web Interface: Configure OSPFv3	100
8. ARP	103
Proxy ARP Examples	103
CLI: show ip interface	103
CLI: ip proxy-arp	104
Web Interface: Configure Proxy ARP on a Port	104
9. VRRP	105
VRRP on a Master Router	106
CLI: Configure VRRP on a Master Router	106
Web Interface: Configure VRRP on a Master Router	107
VRRP on a Backup Router	108
CLI: Configure VRRP on a Backup Router	108
Web Interface: Configure VRRP on a Backup Router	109
10. ACLs	111
MAC ACLs	112
IP ACLs	112
ACL Configuration	112
Set Up an IP ACL with Two Rules	113
CLI: Set Up an IP ACL with Two Rules	113
Web Interface: Set Up an IP ACL with Two Rules	114
One-Way Access Using a TCP Flag in an ACL	117
CLI:Configure One-Way Access Using a TCP Flag in an ACL	117
Web Interface: Configure One-Way Access Using a TCP Flag in an ACL	121
Use ACLs to Configure Isolated VLANs on a Layer 3 Switch	132
CLI: Configure One-Way Access Using a TCP Flag in ACL Commands	133
Web Interface: Configure One-Way Access Using a TCP Flag in an ACL	135
Set up a MAC ACL with Two Rules	144
CLI: Set up a MAC ACL with Two Rules	144
Web Interface: Set up a MAC ACL with Two Rules	145
ACL Mirroring	147
CLI: Configure ACL Mirroring	147
Web Interface: Configure ACL Mirroring	148
ACL Redirect	152
CLI: Redirect a Traffic Stream	152
Web Interface: Redirect a Traffic Stream	153
Configure IPv6 ACLs	157
CLI: Configure an IPv6 ACL	158
Web Interface: Configure an IPv6 ACL	160
11. CoS Queuing	164
CoS Queue Mapping	165
Trusted Ports	165
Untrusted Ports	165
CoS Queue Configuration	166
Show classofservice Trust	166
CLI: Show classofservice Trust	166
Web Interface: Show classofservice Trust	167
Set classofservice Trust Mode	167
CLI: Set classofservice Trust Mode	167
Web Interface: Set classofservice Trust Mode	167
Show classofservice IP-Precedence Mapping	168
CLI: Show classofservice IP-Precedence Mapping	168
Web Interface: Show classofservice ip-precedence Mapping	168
Configure Cos-queue Min-bandwidth and Strict Priority Scheduler Mode	169
CLI: Configure Cos-queue Min-bandwidth and Strict Priority Scheduler Mode	169
Web Interface: Configure CoS-queue Min-bandwidth and Strict Priority Scheduler Mode	169
Set CoS Trust Mode for an Interface	170
CLI: Set CoS Trust Mode for an Interface	171
Web Interface: Set CoS Trust Mode for an Interface	171
Configure Traffic Shaping	171
CLI: Configure traffic-shape	172
Web Interface: Configure Traffic Shaping	172
12. DiffServ	173
DiffServ	174
CLI: Configure DiffServ	175
Web Interface: Configure DiffServ	177
DiffServ for VoIP	190
CLI: Configure DiffServ for VoIP	190
Web Interface: Diffserv for VoIP	192
Auto VoIP	197
CLI: Configure Auto VoIP	198
Web Interface: Configure Auto-VoIP	200
DiffServ for IPv6	201
CLI: Configure DiffServ for IPv6	201
Web Interface: Configure DiffServ for IPv6	202
Color Conform Policy	208
CLI: Configure a Color Conform Policy	208
Web Interface: Configure a Color Conform Policy	209
13. IGMP Snooping and Querier	216
IGMP Snooping	216
CLI: Enable IGMP Snooping	216
Web Interface: Enable IGMP Snooping	217
Show igmpsnooping	217
CLI: Show igmpsnooping	217
Web Interface: Show igmpsnooping	218
Show mac-address-table igmpsnooping	218
CLI: Show mac-address-table igmpsnooping	218
Web Interface: Show mac-address-table igmpsnooping	219
External Multicast Router	219
CLI: Configure the Switch with an External Multicast Router	219
Web Interface: Configure the Switch with an External Multicast Router	220
Multicast Router Using VLAN	220
CLI: Configure the Switch with a Multicast Router Using VLAN	220
Web Interface: Configure the Switch with a Multicast Router Using VLAN	221
IGMP Querier	221
Enable IGMP Querier	222
CLI: Enable IGMP Querier	222
Web Interface: Enable IGMP Querier	223
Show IGMP Querier Status	225
CLI: Show IGMP Querier Status	225
Web Interface: Show IGMP Querier Status	225
14. MVR (Multicast VLAN Registration)	226
Configure MVR in Compatible Mode	227
CLI: Configure MVR in Compatible Mode	228
Web Interface: Configure MVR in Compatible Mode	230
Configure MVR in Dynamic Mode	234
CLI: Configure MVR in Dynamic Mode	234
Web Interface: Configure MVR in Dynamic Mode	236
15. Security Management	240
Port Security	240
Set the Dynamic and Static Limit on Port 1/0/1	241
CLI: Set the Dynamic and Static Limit on Port 1/0/1	241
Web Interface: Set the Dynamic and Static Limit on Port 1/0/1	242
Convert the Dynamic Address Learned from 1/0/1 to a Static Address	243
CLI: Convert the Dynamic Address Learned from 1/0/1 to the Static Address	243
Web Interface: Convert the Dynamic Address Learned from 1/0/1 to the Static Address	243
Create a Static Address	244
CLI: Create a Static Address	244
Web Interface: Create a Static Address	244
Protected Ports	244
CLI: Configure a Protected Port to Isolate Ports on the Switch	245
Web Interface: Configure a Protected Port to Isolate Ports on the Switch	247
802.1x Port Security	251
CLI: Authenticating dot1x Users by a RADIUS Server	251
Web Interface: Authenticating dot1x Users by a RADIUS Server	252
Create a Guest VLAN	257
CLI: Create a Guest VLAN	258
Web Interface: Create a Guest VLAN	259
Assign VLANs Using RADIUS	262
CLI: Assign VLANS Using RADIUS	263
Web Interface: Assign VLANS Using RADIUS	265
Dynamic ARP Inspection	268
CLI: Configure Dynamic ARP Inspection	269
Web Interface: Configure Dynamic ARP Inspection	270
Static Mapping	274
CLI: Configure Static Mapping	274
Web Interface: Configure Static Mapping	275
DHCP Snooping	276
CLI: Configure DHCP Snooping	276
Web Interface: Configure DHCP Snooping	277
Enter Static Binding into the Binding Database	279
CLI: Enter Static Binding into the Binding Database	279
Web Interface: Enter Static Binding into the Binding Database	280
Maximum Rate of DHCP Messages	280
CLI: Configure the Maximum Rate of DHCP Messages	281
Web Interface: Configure the Maximum Rate of DHCP Messages	281
IP Source Guard	282
CLI: Configure Dynamic ARP Inspection	282
Web Interface: Configure Dynamic ARP Inspection	283
16. SNTP	287
Show SNTP (CLI Only)	287
show sntp	287
show sntp client	288
show sntp server	288
Configure SNTP	289
CLI: Configure SNTP	289
Web Interface: Configure SNTP	290
Set the Time Zone (CLI Only)	291
Set the Named SNTP Server	291
CLI: Set the Named SNTP Server	292
Web Interface: Set the Named SNTP Server	292
17. Tools	294
Traceroute	294
CLI: Traceroute	295
Web Interface: Traceroute	296
Configuration Scripting	296
script	297
script list and script delete	297
script apply running-config.scr	298
Create a Configuration Script	298
Upload a Configuration Script	298
Pre-Login Banner	299
Create a Pre-Login Banner (CLI Only)	299
Port Mirroring	300
CLI: Specify the Source (Mirrored) Ports and Destination (Probe)	300
Web Interface: Specify the Source (Mirrored) Ports and Destination (Probe)	301
Dual Image	301
CLI: Download a Backup Image and Make It Active	302
Web Interface: Download a Backup Image and Make It Active	303
Outbound Telnet	304
CLI: show network	305
CLI: show telnet	305
CLI: transport output telnet	306
Web Interface: Configure Telnet	306
CLI: Configure the session-limit and session-timeout	307
Web Interface: Configure the Session Timeout	307
18. Syslog	308
Show Logging	309
CLI: Show Logging	309
Web Interface: Show Logging	309
Show Logging Buffered	311
CLI: Show Logging Buffered	311
Web Interface: Show Logging Buffered	312
Show Logging Traplogs	312
CLI: Show Logging Traplogs	312
Web Interface: Show Logging Trap Logs	312
Show Logging Hosts	313
CLI: Show Logging Hosts	313
Web Interface: Show Logging Hosts	314
Configure Logging for a Port	314
CLI: Configure Logging for the Port	314
Web Interface: Configure Logging for the Port	315
Email Alerting	316
CLI: Send Log Messages to [email protected] Using Account [email protected]	317
19. Switch Stacks	318
Switch Stack Management and Connectivity	318
The Stack Master and Stack Members	319
Stack Master	319
Stack Members	320
Stack Member Numbers	320
Stack Member Priority Values	321
Install and Power-up a Stack	321
Compatible Switch Models	321
Install a Switch Stack	322
Switch Firmware	322
Code Mismatch	323
Upgrade the Firmware	323
Migrate Configuration with a Firmware Upgrade	323
Copy Master Firmware to a Stack Member (Web Interface)	324
Configure a Stacking Port as an Ethernet Port	324
CLI: Configure a Stacking Port as an Ethernet Port	325
Web Interface: Configure a Stacking Port as an Ethernet Port	326
Stack Switches Using 10G Fiber	327
CLI: Stack Switches Using 10G Fiber	328
Web Interface: Stack Switches Using 10G Fiber	329
Add, Remove, or Replace a Stack Member	330
Add Switches to an Operating Stack	330
Remove a Switch from the Stack	331
Replace a Stack Member	331
Switch Stack Configuration Files	332
Preconfigure a Switch	333
Renumber Stack Members	334
CLI: Renumber Stack Members	334
Web Interface: Renumber Stack Members	335
Move the Stack Master to a Different Unit	336
CLI: Move the Stack Master to a Different Unit	336
Web Interface: Move the Stack Master to a Different Unit	336
20. SNMP	337
Add a New Community	337
CLI: Add a New Community	337
Web Interface: Add a New Community	338
Enable SNMP Trap	338
CLI: Enable SNMP Trap	338
Web Interface: Enable SNMP Trap	339
SNMP V3	339
CLI: Configure SNMP V3	340
Web Interface: Configure SNMP V3	340
sFlow	341
CLI: Configure Statistical Packet-Based Sampling of Packet Flows with sFlow	342
Web Interface: Configure Statistical Packet-based Sampling with sFlow	343
Time-Based Sampling of Counters with sFlow	345
CLI: Configure Time-Based Sampling of Counters with sFlow	345
Web Interface: Configure Time-Based Sampling of Counters with sFlow	345
21. DNS	346
Specify Two DNS Servers	346
CLI: Specify Two DNS Servers	346
Web Interface: Specify Two DNS Servers	347
Manually Add a Host Name and an IP Address	347
CLI: Manually Add a Host Name and an IP Address	347
Web Interface: Manually Add a Host Name and an IP Address	348
22. DHCP Server	349
Configure a DHCP Server in Dynamic Mode	349
CLI: Configure a DHCP Server in Dynamic Mode	349
Web Interface: Configure a DHCP Server in Dynamic Mode	350
Configure a DHCP Reservation	352
CLI: Configure a DHCP Reservation	353
Web Interface: Configure a DHCP Reservation	353
23. DHCPv6 Server	355
CLI: Configure DHCPv6	357
Web Interface: Configure an Inter-area Router	358
Configure Stateless DHCPv6 Server	362
CLI: Configure Stateless DNS Server	362
Web Interface: Configure Stateless DHCPv6 Server	363
24. Double VLANs and Private VLAN Groups	366
Double VLANs	366
CLI: Enable a Double VLAN	367
Web Interface: Enable a Double VLAN	367
Private VLAN Groups	370
CLI: Create a Private VLAN Group	371
Web Interface: Create a Private VLAN Group	372
25. Spanning Tree Protocol	376
Configure Classic STP (802.1d)	376
CLI: Configure Classic STP (802.1d)	376
Web Interface: Configure Classic STP (802.1d)	377
Configure Rapid STP (802.1w)	378
CLI: Configure Rapid STP (802.1w)	378
Web Interface: Configure Rapid STP (802.1w)	378
Configure Multiple STP (802.1s)	379
CLI: Configure Multiple STP (802.1s)	379
Web Interface: Configure Multiple STP (802.1s)	380
26. Tunnel	382
CLI: Create a Tunnel	383
Configure Switch GSM7328S_1	383
Configure Switch GSM7328S_2	384
Web Interface: Create a Tunnel	385
Configure Switch GSM7328S_1	385
Configure Switch GSM7328S_2	387
27. IPv6 Interface Configuration	390
Create an IPv6 Routing Interface	390
CLI: Create an IPv6 Routing Interface	390
Web Interface: Create an IPv6 Routing Interface	392
Create an IPv6 Network Interface	393
CLI: Configure the IPv6 Network Interface	394
Web Interface: Configure the IPv6 Network Interface	394
Create an IPv6 Routing VLAN	395
CLI: Create an IPv6 Routing VLAN	395
Web Interface: Create an IPv6 VLAN Routing Interface	397
Configure DHCPv6 Mode on the Routing Interface	400
CLI: Configure DHCPv6 mode on routing interface	400
Web Interface: Configure DHCPv6 mode on routing interface	401
28. PIM	403
PIM-DM	403
CLI: Configure PIM-DM	405
Web Interface: Configure PIM-DM	409
PIM-SM	427
CLI: Configure PIM-SM	428
Web Interface: Configure PIM-SM	432
29. DHCP L2 Relay and L3 Relay	454
DHCP L2 Relay	454
CLI: Enable DHCP L2 Relay	455
Web Interface: Enable DHCP L2 Relay	456
DHCP L3 Relay	460
Configure the DHCP Server Switch	460
Configure a DHCP L3 Switch	465
30. MLD	470
Configure MLD	471
CLI: Configure MLD	471
Web Interface: Configure MLD	473
MLD Snooping	484
CLI: Configure MLD Snooping	485
Web Interface: Configure MLD Snooping	486
31. DVMRP	489
CLI: Configure DVMRP	490
Web Interface: Configure DVMRP	496
32. Captive Portal	507
Captive Portal Configuration	508
Enable Captive Portal	508
CLI: Enable Captive Portal	508
Web Interface: Enable Captive Portal	509
Client Access, Authentication, and Control	510
Block a Captive Portal Instance	511
CLI: Block a Captive Portal Instance	511
Web Interface: Block a Captive Portal Instance	511
Local Authorization, Create Users and Groups	511
CLI: Create Users and Groups	512
Web Interface: Create Users and Groups	512
Remote Authorization (RADIUS) User Configuration	513
CLI: Configure RADIUS as the Verification Mode	514
Web Interface: Configure RADIUS as the Verification Mode	515
SSL Certificates	515

Match case Limit results 1 per page

508

Chapter 32.

Captive Portal

ProSafe Managed Switch

You can enable captive portal on all the physical ports on the switch. It is not supported for VLAN

interfaces, loopback interfaces or logical interfaces. The captive portal feature uses

MAC-aaddress based authentication and not port-based authentication. This means that all the

clients connected to the captive portal interface must be authenticated before they can get

access to the network.

Clients connecting to the captive portal interface have three states; unknown, unauthenticated,

and authenticated.

•

Unknown

. In the unknown state, the captive portal does not redirect HTTP/S traffic to the

switch, but instead asks the switch whether the client is authenticated or unauthenticated.

•

Unathenticated

. The captive portal directs the HTTP/S traffic to the switch so that the

client can authenticate with the switch.

•

Authenticated

. After successful authentication, the client is placed in authenticated state.

In this state, all the traffic emerging from the client is forwarded through the switch.

Captive Portal Configuration

This section introduces the objects that make up the captive portal and describes the

interaction between the captive portal and the network administrator. It explains what

configurations are visible to the network administrator and enumerates the events.

All the configurations included in this section are managed using the CLI, the Web Interface,

and SNMP, with one exception; to customize the captive portal Web page, you must use the

Web Interface.

The captive portal configuration provides the network administrator control over verification

and authentication, assignment to interfaces, client sessions, and Web page customization.

You can create multiple captive portal configuration instances. Each captive portal

configuration contains various flags and definitions used to control client access and content

to customize the user verification Web page. A captive portal configuration can be applied to

one or more interfaces. An interface can only be a physical port on the switch. Software

release 8.0 and newer versions can contain up to 10 captive portal configurations.

Enable Captive Portal

CLI: Enable Captive Portal

Enable captive portal on the switch.

(Netgear Switch) (config)#captive-portal

(Netgear Switch) (Config-CP)#enable