WLAN-WEB认-BAS配置.docVIP

WLAN通过web认证，以下是BAS的配置：（红色部分为必须配置的） # sysname SNYUL-MC-CMNET-BAS03-XSEC-ME60 # super password level 3 cipher REN.6A.1^SQ=^Q`MAF41!! super password level 15 cipher JS,[51EA,%B,.\#C3YB91!! # router id 48 # user-group wlan user-group sxyd # diffserv domain default # radius-server group snmcc radius-server authentication 1812 weight 0 radius-server authentication 1812 weight 10 radius-server accounting 1813 weight 0 radius-server accounting 1813 weight 10 radius-server shared-key 135--139 radius-server class-as-car radius-server source interface LoopBack0 radius-server attribute translate undo radius-server user-name domain-included # bfd # mpls lsr-id 48 mpls # mpls ldp # acl number 2000 description NAT-IN rule 5 permit # acl number 2100 rule 5 permit source 55 rule 10 permit source 55 rule 15 deny # acl number 3000 rule 5 deny udp destination-port eq 593 rule 10 deny udp destination-port eq 1434 rule 15 deny udp destination-port eq 136 rule 20 deny udp destination-port eq 135 rule 25 deny udp destination-port eq 5554 rule 30 deny udp destination-port eq netbios-ns rule 35 deny udp destination-port eq netbios-ssn rule 40 deny udp destination-port eq 445 rule 45 deny tcp destination-port eq 4444 rule 50 deny tcp destination-port eq 135 rule 55 deny tcp destination-port eq 9996 rule 60 deny tcp destination-port eq 137 rule 65 deny tcp destination-port eq 139 rule 70 deny tcp destination-port eq 9995 rule 75 deny tcp destination-port eq 138 rule 80 deny tcp destination-port eq 5554 rule 85 deny tcp destination-port eq 445 rule 90 deny tcp destination-port eq 5800 rule 95 deny tcp destination-port eq 5900 rule 100 deny tcp destination-port eq 593 rule 105 deny tcp destination-port eq 1720 rule 110 deny tcp destination-port eq 136 rule 500 permit ip # acl number 6000 match-order auto rule 5 permit ip source ip-address 0 destination user-group wlan rule 10 permit ip source ip-address 0 destination user-group wlan rul