On the Configuration > Security > Web Auth page, you can customize the content and appearance of the login page for guest users. You can personalize the login page with a company logo, graphics, colors, type styles, a welcome message, any terms and conditions, and so on.

You can also view the current web authentication certificate type or download an SSL certificate.

If Web Authentication is turned on (under WLAN Security Policies), the login page is displayed the first time you access the WLAN. Cisco provides a default web login page that can be modified with any text-based HTML editor.

1. In the Web Auth Parameter Map tab, click Add.
2. In the Create Web Auth Parameter window that is displayed, enter a name for the parameter map.
3. In the Maximum HTTP Connections field, enter the maximum number of HTTP connections that you want to allow.
4. In the Init-State Timeout field, enter the time after which the init state timer should expire due to user's failure to enter valid credentials in the login page.
5. Choose the type of Web Auth parameter.
6. Click Apply to Device.

In the Web Auth Parameter Map tab, click the parameter map name to view the Edit Web Auth Parameter window.

1. In the General tab, enter the Banner Title.
2. Choose the Banner Type.
   • If you choose Banner Text, enter the required banner text to be displayed.
   • If you choose File Name, specify the path of the file from which the banner text has to be picked up.
3. In the Maximum HTTP Connections field, enter the maximum number of HTTP connections that you want to allow. Valid range is between 1 connection to 200 connections.
4. In the Init-State Timeout field, enter the time after which the init state timer should expire due to user's failure to enter valid credentials in the login page. Valid range is between 60 seconds to 3932100 seconds.
5. From the Type drop-down list, select either webauth, authbypass, consent, webconsent. If you select consent, the Turn-on Consent with Email check box is displayed.
6. Enter the Virtual IPv4 Address.
7. From the Trustpoint drop-down list, select the required trustpoint.
8. Enter the Virtual IPv4 Hostname and the Virtua.l IPv6 Address.
9. Set appropriate status of WebAuth Intercept HTTPS, Captive Bypass Portal, and Watch List Enable.
10. In the Watch List Expiry Timeout field, enter the time in seconds after which the watch list should time out.
11. Set appropriate status for Captive Bypass Portal, Disable Success Window, Disable Logout Window, and Disable Cisco Logo.
12. Check the Sleeping Client Status check box to enable authentication of sleeping clients and then specify the Sleeping Client Timeout in minutes. Valid range is between 10 minutes and 43200 minutes.
13. Click Update & Apply.

1. In the Advanced tab, under the Redirect to external server section, enter the redirect server address for log-in, on-success, on-failure, AP MAC address, client MAC address, and WLAN SSID.
2. Enter the Portal IPv4 Address and Portal IPv6 Address.
3. In the Customized page section, choose an option from the Login Failed Page, Login Page, Logout Page, and Login Successful Page drop-down lists.
4. Click Update & Apply.