External Web Authentication on a VLAN

External Web Authentication can be configured as a fallback authentication method for Flexible authentication (a combination of 802.1X authentication and MAC authentication).

External Web Authentication can be enabled on any VLAN associated with Flexible authentication (restricted VLAN, guest VLAN, or critical VLAN). You can also enable external Web Authentication on any VLAN which is independent of Flexible authentication configuration. In either case, the client must send HTTP request for the switch to initiate external Web Authentication.

Figure 25 illustrates the external Web Authentication flow on a restricted VLAN configured as part of Flexible authentication and a normal VLAN (any VLAN) which is independent of Flexible authentication configuration.

Figure 25  External Web Authentication flow