Troubleshooting Ead Fast Deployment; Web Browser Users Cannot Be Correctly Redirected - HP 5120 SI Series Security Configuration Manual
Hide thumbs
Also See for 5120 SI Series:
- Command reference manual (395 pages) ,
- Installation manual (48 pages) ,
- Specification (33 pages)
Table of Contents
# Configure the redirect URL for client software download.
[Device] dot1x url http://192.168.2.3
# Enable 802.1X globally.
[Device] dot1x
# Enable 802.1X on the port.
[Device] interface gigabitethernet 1/0/1
[Device-GigabitEthernet1/0/1] dot1x
Verification
Use the display dot1x command to display the 802.1X configuration. After the host obtains an IP address
from a DHCP server, use the ping command from the host to ping an IP address on the network segment
specified by free IP.
C:\>ping 192.168.2.3
Pinging 192.168.2.3 with 32 bytes of data:
Reply from 192.168.2.3: bytes=32 time<1ms TTL=128
Reply from 192.168.2.3: bytes=32 time<1ms TTL=128
Reply from 192.168.2.3: bytes=32 time<1ms TTL=128
Reply from 192.168.2.3: bytes=32 time<1ms TTL=128
Ping statistics for 192.168.2.3:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
The output shows that you can access that segment before passing 802.1X authentication.
Before passing 802.1X authentication, if a user uses a web browser to access any external website, the
user is redirected to the web server, which provides the 802.1X client software download service. Enter
the external website address in the address bar in the format of X.X.X.X in dotted decimal notation, for
example, 3.3.3.3 or http://3.3.3.3. The external website address should not be on the freely accessible
network segment.
Troubleshooting EAD fast deployment
Web browser users cannot be correctly redirected
Symptom
Unauthenticated users are not redirected to the specified redirect URL after they enter external website
addresses in their web browsers.
Analysis
Redirection will not happen for one of the following reasons:
The address is in the string format. The operating system of the host regards the string as a website
•
name and tries to resolve it. If the resolution fails, the operating system sends an ARP request, but the
target address is not in the dotted decimal notation. The redirection function does redirect this kind
of ARP request.
93
Table of Contents
Troubleshooting
