sw JWAC State

This object enables/disables the JWAC function. JWAC and WAC are mutually exclusive functions. That is, they can not be enabled at the same time. Using the JWAC function, PC users need to pass two stages of authentication. The first stage is to do the authentication with the quarantine server and the second stage is the authentication with the switch. For the second stage, the authentication is similar to WAC, except that there is no port VLAN membership change by JWAC after a host passes authentication. The RADIUS server will share the server configuration defined by the 1X command set. ::= { swJWACCtrl 1 } SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION This object enables/disables the JWAC redirect function. When the redirect quarantine_server is enabled, the unauthenticated host will be redirected to the quarantine server when it tries to access a random URL. When the redirect jwac_login_page is enabled, the unauthenticated host will be redirected to the jwac_login_page in the Switch to finish authentication. When redirect is disabled, only access to the quarantine_server and the jwac_login_page from the unauthenticated host are allowed, all other web access will be denied. NOTE: When enabling redirect to the quarantine_server, a quarantine_server must be configured first. ::= { swJWACCtrl 2 } SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION This object enables/disables the JWAC forcible_logout function. When forcible_logout is enabled, a PING packet from an authenticated host to the JWAC Switch with TTL=1 will be regarded as a logout request, and the host will move back to the unauthenticated state. ::= { swJWACCtrl 3 } SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION This object enables/disables the JWAC udp_filtering function. When udp_filtering is enabled, all UDP and ICMP packets except DHCP and DNS packets from unauthenticated hosts will be dropped. ::= { swJWACCtrl 4 } SYNTAX INTEGER { enabled(1), disabled(2) } MAX-ACCESS read-write STATUS current DESCRIPTION This object enables/disables the JWAC Quarantine Server monitor function. When enabled, the JWAC Switch will monitor the Quarantine Server to ensure the server is okay. If the Switch detects no Quarantine Server, it will redirect all unauthenticated HTTP access attempts to the JWAC Login Page forcibly if the redirect is enabled and the redirect destination is configured to be a Quarantine Server. ::= { swJWACCtrl 5 } SYNTAX INTEGER (5..300) MAX-ACCESS read-write STATUS current DESCRIPTION Used to set the Quarantine Server error timeout. When the Quarantine Server monitor is enabled, the JWAC Switch will periodically check if the Quarantine works okay. If the Switch does not receive any response from the Quarantine Server during the configured error timeout, the Switch then regards it as not working properly. ::= { swJWACCtrl 6 } SYNTAX INTEGER { quarantine_server(1), jwac_login_page(2) } MAX-ACCESS read-write STATUS current DESCRIPTION Specifies the destination before an unauthenticated host is redirected to the Quarantine Server or JWAC login web page. ::= { swJWACCtrl 7 } SYNTAX INTEGER (0..10) MAX-ACCESS read-write STATUS current DESCRIPTION Specifies the delay time before an unauthenticated host is redirected to the Quarantine Server or JWAC login web page. The unit of delay_time is seconds. 0 means no delay in the redirect. ::= { swJWACCtrl 8 } SYNTAX IpAddress MAX-ACCESS read-write STATUS current DESCRIPTION Specifies the JWAC virtual IP address which is used to accept authentication requests from an unauthenticated host. The virtual IP of JWAC is used to accept authentication requests from an unauthenticated host. Only requests sent to this IP will get a correct response. NOTE: This IP does not respond to ARP requests or ICMP packets. ::= { swJWACCtrl 9 } SYNTAX DisplayString(SIZE(0..128)) MAX-ACCESS read-write STATUS current DESCRIPTION Specifies the JWAC Quarantine Server URL. If the redirect is enabled and the redirect destination is the Quarantine Server, when an unauthenticated host sends the HTTP request packets to a random WEB server, the Switch will handle this HTTP packet and send back a message to the host to allow it access to the Quarantine Server with the configured URL. When the PC is connected to the specified URL, the quarantine server will request the PC user to input the user name and password to complete the authentication process. ::= { swJWACCtrl 10 } SYNTAX INTEGER(1..65535) MAX-ACCESS read-write STATUS current DESCRIPTION Specifies the TCP port which the JWAC Switch listens to and uses to finish the authenticating process.