Cisco Identity Services Engine: Web Authentication Configuration for Non-Standard Ports

Redirecting Traffic to the Correct Port

Question

An engineer is configuring web authentication using non-standard ports and needs the switch to redirect traffic to the correct port.

Which command should be used to accomplish this task?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

B.

The command that should be used to redirect traffic to the correct port when configuring web authentication using non-standard ports on a Cisco switch is option B, "ip http port <port number>".

Explanation: By default, the HTTP server on a Cisco switch listens on port 80. However, in some cases, a network administrator may need to use a different port for web authentication, for example, to avoid conflicts with other applications or to improve security. The "ip http port <port number>" command can be used to configure the switch to listen on a non-standard HTTP port.

For example, if the network administrator wants to use port 8080 for web authentication, the command to be used is:

scss
Switch(config)# ip http port 8080

This command tells the switch to listen on port 8080 for HTTP traffic.

Note that this command only configures the switch to listen on a non-standard port for web authentication. To actually redirect traffic to the correct port, additional configuration may be necessary, such as configuring a Layer 3 device to perform NAT or port forwarding. However, this command is the first step in the process of configuring web authentication on a non-standard port.

Option A, "permit tcp any any eq <port number>", is not related to redirecting traffic to the correct port for web authentication. This command is used in an access control list (ACL) to permit TCP traffic on a specific port.

Option C, "aaa group server radius", is used to create a group of RADIUS servers that can be used for authentication and authorization on a Cisco switch. This command is not related to redirecting traffic to the correct port for web authentication.

Option D, "aaa group server radius proxy", is used to configure a Cisco switch to act as a proxy for RADIUS authentication requests. This command is not related to redirecting traffic to the correct port for web authentication.