topic Re: Web authentication with a proxy configured in browser in Network Access Control

Web authentication with a proxy configured in browser

fbroussey — Sun, 10 Mar 2019 22:55:29 GMT

Hi,

We encounter a problem with web AUthentication fallback in a catalyst 3750.

We configured 802.1x on the 3750. This works great but the pb is with the fallback Webauth. When the client has no proxy configured there is no pb; I mean the client is prompted with the authentication webpage. But if the client has a proxy he doesn't. The client can browse internet throught the proxy but the switch port remain in the INIT state of ip admission and is never prompted:

Authentication Proxy Cache

Total Sessions: 1 Init Sessions: 1

Client IP 10.166.194.54 Port 0, timeout 1, state INIT

So he can't do anything else that browsing internet...

Any idea about how to access the authentication webpage if there is a proxy configured in the browser ?

Thanks for your answer

Re: Web authentication with a proxy configured in browser

Jagdeep Gambhir — Mon, 23 Jun 2008 13:32:42 GMT

It seems that local authentication for auth-proxy is not supported (not 100% sure. Please provide IOS ver and aaa config for the switch in question.

Regards,

~JG

Re: Web authentication with a proxy configured in browser

fbroussey — Mon, 23 Jun 2008 18:17:38 GMT

Thanks for your answer.

You'll find attached part of the config with IOS version.

NOte that we work only on port g1/0/3 for now...

Regards,

Fred

Re: Web authentication with a proxy configured in browser

Jagdeep Gambhir — Tue, 24 Jun 2008 14:00:08 GMT

Fred,

Pls see this bug,

aaa local authentication not happening for authproxy

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsh23142

Regards,

~JG

Re: Web authentication with a proxy configured in browser

ryancolson — Sun, 29 Jun 2008 02:08:03 GMT

at least on my 1721 local proxy auth does work, however, I cannot figure out how to configure any more granular control then simple pass/fail