Users Guide

Security Commands 987
Command Mode
Global Configuration
User Guidelines
The switch redirects HTTP/HTTPS packets that are not addressed to the
switch to the redirect address using the configured redirect URL with HTTP
redirect code 302(Found) or 200 (OK).
The IP address should match the address returned by DNS or the DNS hijack
configured using the ip dns server address command.
A redirect target is used with a redirect URL and a statically-configured ACL
in authentication open mode. The ACL must contain a permit clause for
access to the redirect target and any other services provided to
unauthenticated hosts, such as DNS or DHCP. Other clauses restricting
access to the network may be added as desired.
When authentication succeeds via 802.1X or MAB, the authentication server
must send a dynamic ACL allowing access to the network. The dynamic ACL
will replace the static ACL described in the preceding paragraph.
Example
console(config)#ip admission proxy http redirect-tgt 192.168.1.
Command History
Command introduced in version 6.7.0 firmware.
ip dns domain-list
Use this command to configure a DNS hijack.
Syntax
ip dns domain-list fqdn
no ip dns domain-list fqdn
• fqdn — A fully-qualified domain name.
Default Configuration
There is no DNS domain list configured by default.