cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1173
Views
0
Helpful
1
Replies

Adminission or AUTH-PROXY supported on 3750-X ?

grodoni
Level 1
Level 1

It seems that Web-auth and auth-proxy are not supported on 3750-x (I am running 12.2(55)SE IP-Services IOS).

CONFIG 1)

!
ip device tracking
ip auth-proxy auth-proxy-banner http
ip auth-proxy name HTTPPROXY http inactivity-time 60
!

interface GigabitEthernet1/0/2
no switchport
ip address 172.16.14.100 255.255.255.0

Switch(config)#int g 1/0/2           
Switch(config-if)#ip auth-proxy HTTPPROXY
% This config is not supported on this platform. Try configuring a new rule.

CONFIG 2)

ip device tracking
ip admission auth-proxy-banner http
ip admission name webauth proxy http inactivity-time 60
!

Switch(config-if)#int g 1/0/2           
Switch(config-if)#ip admission webauth  
% This config is not supported on this platform. Try configuring a new rule.

From the manual it should be supported: ....and specifies the ingress Layer 2 or Layer 3

Command
Purpose

Step 1

ip admission name name proxy http

Configure an authentication rule for web-based authorization.

Step 2

interface type slot/port

Enter interface configuration mode and specifies the ingress Layer 2 or Layer 3 interface to be enabled for web-based authentication.

type can be fastethernet, gigabit ethernet, or tengigabitethernet.

Step 3

ip access-group name

Apply the default ACL.

Step 4

ip admission name

Configures web-based authentication on the specified interface.

Step 5

exit

Return to configuration mode.

Step 6

ip device tracking

Enables the IP device tracking table.

Step 7

end

Return to privileged EXEC mode.

Step 8

show ip admission configuration

Display the configuration.

Step 9

copy running-config startup-config

(Optional) Save your entries in the configuration file.

1 Reply 1

grodoni
Level 1
Level 1

answer from Cisco: webauth or auth-proxy supported only via RADIUS or TACACs.

Not supported via local authentication ....