Next up, we're going to take a look at web auth.
And once again, it is a little bit similar between the platforms.
But let's start with iOS XE.
We're going to go to configuration, down here to security.
And as we scroll down, we're going to see web auth.
So I'm going to click this.
I'm going to take a look at-- well, first of all,
I've got this global parameter map name.
We could use the default global one.
I'm just going to click Add here and add my own, again,
what's known as a parameter map name.
So we'll see what this is doing in a moment. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So we'll see what this is doing in a moment.
I'm going to configure this as CBTN map.
And make sure that this is selecting web auth,
as opposed to some kind of just consent form.
But we're actually expecting a username and password here.
Apply it to the device.
And now I can click on it and see the different configuration
options.
So this is sort of my way of configuring the web page.
I can come to the banner title.
I could say CBTN welcomes you.
I could change the banner type. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
I could change the banner type.
I could actually add a file.
So it's an image.
I could change it to a banner text and say, please get your user
pass from--
I don't know--
CBTN security or whatever we're doing here.
We've got some options here down here
as far as the web portal is concerned.
And interestingly, on the Advanced tab,
this is where we can redirect to an external server.
So if we want to fully customize our web portal, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So if we want to fully customize our web portal,
then we would have to use an external server.
Otherwise, we're limited to these options here.
Oh, by the way, one thing that might be worth noting,
I can disable the Cisco logo so that people don't
see that it's a Cisco network.
Maybe just a privacy concern there,
but it might be worth considering.
So now let's go add that to our WLAN.
I'm going to come back to my WLAN list.
Click it.
We left it in 802.1x.
As a state, I'm going to just say none now.
I'm going to disable layer 2 security, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
I'm going to disable layer 2 security,
come over to layer 3, select the web policy,
and select my parameter map here.
So that's my parameter map.
And then how do I want to perform my authentication?
So I've got my authentication list here.
We've selected that as default.
And this is not showing up.
So let's go ahead and take a quick look at this.
OK, default.
Because it's labeled as a .1x.
So let's go ahead and just add our own real quick. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So let's go ahead and just add our own real quick.
We're going to call this web auth.
And using the dropdown, I can select login.
So from here, I'll add my radius group.
So we can still log in using radius using this method.
So now I've got that configured.
So unfortunately, now I have to go back to my WLANs.
Let's go ahead and do that.
That's good practice, right?
So we come back to security, say none.
Layer 3, enable the web policy, select my parameter map. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Layer 3, enable the web policy, select my parameter map.
And now I can select my web auth authentication list.
So I'm going to update and apply that.
And now we're going to log into the network.
So I'm going to share my screen again.
Over here, I'm going to fire up and look for CBT and iOSXE.
So hopefully, this is the new one.
We know that the old one, both of these now
are configured for 802.1x, although this is old.
So I'm going to click here.
And it's an open network.
Notice that it's an open network I'm going to say connect. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Notice that it's an open network I'm going to say connect.
And well, that was easy.
All right.
And look at this.
I'm getting redirected over-- oops-- on the other screen.
Let me do this over here.
And now we see that we are taken to this login page.
I need to provide my username and password.
Now notice CBT and welcomes you to an exact page.
It's a very quickly fit, I suppose.
But Cisco is pleased to provide-- now, this is interesting.
This is the default banner.
And so it didn't take my text there,
but we do see that it took that. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
but we do see that it took that.
So either way, we can enter the username and password.
We can play around with this.
Try to customize it.
We can remove this Cisco logo up here.
It's a very basic web page.
This is not going to impress anybody.
If you want it to look a little bit more impressive,
we could try to customize it with a logo.
But for the most part, we would want to just develop
our own external web application.
But hey, this is certainly the simple option.
So having seen that, let's go ahead and go back to AroS
and do the same thing.
I'm going to follow a very similar pattern. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
I'm going to follow a very similar pattern.
I'm going to go to security.
And down here on the left, I'm going to see web auth
and go to web login page.
So here we see our options.
I've got my ability to go to an external redirection
if I want to, or I can use the internal right here.
I can redirect to a URL after login.
So I could say something like, hey, take us to CBTnuggets.com.
And then we can hide or show the Cisco logo.
And then we've got a headline message here.
Let's just call it headline and then custom message. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Let's just call it headline and then custom message.
And then we'll see exactly where these show up.
So I'm going to click apply.
And here's the cool thing.
I can actually preview it here.
So I'm going to click the preview button.
And we see exactly what this looks like.
Hey, this looks very similar to what we just did on iOS XE.
It's entirely possible.
They copied that code.
Either way, we see where headline shows up.
We see where the message shows up.
Usernaming password are going to be able to provide
our login here.
And I guess we just said to hide the Cisco logo. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And I guess we just said to hide the Cisco logo.
I didn't notice that.
That was set to hide.
So if we wanted to show it, I could apply it, preview it.
And now we see the Cisco logo showing up over here.
So let's go ahead and add it to our SSID.
I'm going to go to WLANs.
Go to my security tab, disable layer to security.
So I'm going to say none here.
Then I will go to layer three security,
change it to web policy.
Say, yeah, we understand what we're doing here.
Make sure it's on authentication.
The interface looks a little different,
but we're basically following the same process. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
but we're basically following the same process.
And then I go to AAA servers.
Make sure that I've got my AAA configured properly there.
And then I add apply.
Yes, it will be a disruptive change to the SSID.
But hey, now we are using our web policy using web auth.
And so now anybody who is associating to that SSID
will have to go through the web portal.
We're still providing a username and password
that I give them in order to access our network.