Your software release may not support all the features documented in this module. For the latest caveats and feature information, see Bug Search Tool and the release notes for your platform and software release. To find information about the features documented in this module, and to see a list of the releases in which each feature is supported, see the feature information table at the end of this module.

Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to www.cisco.com/​go/​cfn. An account on Cisco.com is not required.

• The MAC address of the device and the username or password is mapped. Once an entry is added to sleeping-client cache, all users of the device get the same policies that are stored in the cache. To use different policies, a user can force normal authentication by logging out. To log out, use http[s]://<Virtual IP/Virtual Host>/logout.html.

• Mobility is not supported. If a device sleeps, wakes up, and gets associated with a different foreign controller, the device undergoes normal authentication on the foreign controller.

The Webauth Sleeping Client feature enables users to login once and not be disturbed with login forms for a configurable period. The details of the devices (sleeping clients) that need to be remembered are stored in the sleeping client cache.

Once a user authenticates successfully for the first time, an entry is added to the sleeping client cache and the sleeping client timer starts. If the authenticated device goes to sleep and wakes up, the service manager uses the web authentication method to check if there is an entry in the sleeping client cache for the mapped MAC address. If the entry is found, the authentication is run in the background using the stored credentials. If the authentication is successful, the sleeping client cache is updated and a logout access control list (ACL) is added. The logout ACL helps the client force normal authentication by logging out. In case the authentication fails with the stored credentials, the entry is deleted from the sleeping client cache.

If the service manager does not find any entry in the sleeping client cache for the mapped MAC address, normal authentication is performed. After successful authentication, an entry is added to the sleeping client cache and the sleeping client timer starts.

1.    enable


2.    configure terminal


3.    parameter-map type webauth {parameter-map-name | global}


4.    sleeping-client [timeout time]


5.    end


6.    clear ip admission sleeping client {* | mac-address}


7.    exit

Device> enable

Device# configure terminal

Device(config)# parameter-map type webauth global

Device(config-params-parameter-map)# sleeping-client timeout 60

Device(config-params-parameter-map)# end

Device# clear ip admission sleeping client *

Device# exit

1.    enable


2.    show ip admission sleeping-client


3.    show ip admission cache

Device> enable

Device# show ip admission sleeping-client

Sleeping-Client Cache
Total number of sleeping-client entries: 1
Client-mac Time-Remaining(min)
00e1.e1e1.0001 59 
 

Device# show ip admission cache

^Client MAC 00e1.e1e1.0001 Client IP 2001:DB8::1 IPv6 ::, State AUTHZ, Method Webauth