华为AC605与OSSH免费版华为Portal系统的对接.docVIP

华为AC6605与OSSH免费版华为Portal系统的对接 OSSH免费版华为Portal系统支持华为Portal协议，能够跟市面上支持华为协议的设备进行对接，方便的实现Web Portal认证。下面我们介绍华为主流6605系列AC同OSSH免费版华为Portal的对接示例，仅供大家参考。 网络拓扑如下： 配置说明： 1、将无线认证用户及设备划分到VLAN2014 # vlan 2014 description user_vlan # 2、配置Radius认证模板 # radius-server template radius_huawei radius-server shared-key cipher %@%@,%+K=Sl9NOmxy2@J~X//97v%@%@ radius-server authentication 1812 weight 80 radius-server accounting 1813 weight 80 undo radius-server user-name domain-included # # url-template name urlTemplate_0 # 3、配置Portal认证对接的参数 # web-auth-server portal server-ip port 50100 shared-key cipher %@%@qfU0XjxGk-{_|i4x;,/v~S%@%@ url :8080/login.jsp url-template urlTemplate_0 user-sync # 4、配置无线认证用户的地址池、网关及DNS # ip pool wifi_user gateway-list network mask excluded-ip-address 0 lease day 0 hour 1 minute 0 dns-list # 5、配置AAA模板 # aaa authentication-scheme default authentication-scheme radius_huawei authentication-mode radius authorization-scheme default accounting-scheme default accounting-scheme radius_huawei accounting-mode radius domain default domain default_admin domain authentication-scheme radius_huawei accounting-scheme radius_huawei radius-server radius_huawei local-user admin password cipher %@%@lA9^Vm7sN452P)V;[5Fcc(%@%@ local-user admin privilege level 15 local-user admin service-type telnet ssh ftp web http # 6、配置VLAN2014的地址以及在该Vlan中启用Portal认证 # interface Vlanif2014 ip address web-auth-server portal direct dhcp select global # 7、其他配置如下： # interface GigabitEthernet0/0/1 port link-type access port default vlan 2014 # interface GigabitEthernet0/0/2 port link-type access port default vlan 2014 # # interface GigabitEthernet0/0/24 port link-type trunk port trunk allow-pass vlan 2014 to 2015 # interface XGigabitEthernet0/0/1 # interface XGigabitEthernet0/0/2 # interface Wlan-Ess0 port hybrid pvid vlan 2014 undo port hybrid vlan 1 port hybrid untagged vlan 2014 permit-domain name force-domain name # interface Wlan-Ess1 descriptio