Restrictions and guidelines: Web authentication configuration

To access the resources in the authorization or Auth-Fail VLAN, a user must update the IP address of the client after being assigned to the authorization or Auth-Fail VLAN.

The device supports the following types of authorization ACLs:

For an authorization ACL to take effect, make sure the following requirements are met:

As a best practice, perform Web authentication on users directly connected to the device. As shown in Figure 88, if you enable Web authentication on Port B to authenticate non-directly connected users (the hosts), you must follow these restrictions and guidelines:

Figure 88: Web authentication for non-directly connected users