Best way to direct 802.1X guest VLAN to login page?

[l0stb0y_]

I have successfully implemented 802.1x on our Cisco switches using an IC 4500. I took it one step more and am using MAB and a MAC Addr Realm to authenticate our Avaya IP phones. All of that is working well. What I'd like to do now is create a guest VLAN on the switch for users who fail authentication to fall into and direct them to a username/password login page before allowing them to access the Internet. I'd prefer to do this without using an Infranet Enforcer point if possible. Appreciate any thoughts on how best to accomplish this.

Thanks,

Rob

[ManojReddy_ · Accepted solution]

you can use switch's(if your switch supports it) web auth feature to do this.

[l0stb0y_]

Thanks for the suggestion. I hadn't thought about that.