The auth-proxy Interface Configuration

Use the interface configuration command ip auth-proxy to apply the named authentication proxy rule to a firewall interface. Connection-initiating HTTP traffic passing into the interface is intercepted for authentication if no existing authentication cache entry exists.

If no ACL is defined as part of the rule, traffic from all hosts is given the opportunity to authenticate. If an ACL is referenced in the rule, only those IP addresses of hosts that match the ACL is allowed to attempt to authenticate. Traffic from all other addresses is discarded.

Use the no form of this command with a rule name to disable that specific authentication proxy rule on the interface. If a rule isn’t specified, the no form of this command disables the authentication proxy on the interface.

Rtr1(config)#ip auth-proxy auth-proxy-name
Rtr1(config)#no ip auth-proxy [auth-proxy-name]

This command was introduced in IOS 12.0(5)T. No default behavior or values.

This example applies the authentication proxy rule sales_users to interface Ethernet0.

Rtr1(config)#interface e0 
Rtr1(config-if)#ip address 192.168.4.2 255.255.255.0
Rtr1(config-if)#ip access-group 100 in
Rtr1(config-if)#ip auth-proxy sales_users
Rtr1(config-if)#ip nat inside
Rtr1(config-if)#no shutdown cp8Veri