華為AC6605與OSSH免費(fèi)版華為Portal系統(tǒng)的對(duì)接

nicem6

OSSH免費(fèi)版華為Portal系統(tǒng)支持華為Portal協(xié)議，能夠跟市面上支持華為協(xié)議的設(shè)備進(jìn)行對(duì)接，方便的實(shí)現(xiàn)Web Portal認(rèn)證。下面我們介紹華為主流6605系列AC同OSSH免費(fèi)版華為Portal的對(duì)接示例，僅供大家參考。
網(wǎng)絡(luò)拓?fù)淙缦拢?br />



配置說明：
1、將無線認(rèn)證用戶及設(shè)備劃分到VLAN2014
#
vlan 2014
description user_vlan
#
2、配置Radius認(rèn)證模板
#
radius-server template radius_huawei
radius-server shared-key cipher %@%@,%+K=Sl9NOmxy2@J~"X//97v%@%@
radius-server authentication 192.168.10.3 1812 weight 80
radius-server accounting 192.168.10.3 1813 weight 80
undo radius-server user-name domain-included
#
#
url-template name urlTemplate_0
#
3、配置Portal認(rèn)證對(duì)接的參數(shù)
#
web-auth-server portal
server-ip 192.168.10.3
port 50100
shared-key cipher %@%@qfU0XjxGk-{_|i"4x;<,/v~S%@%@
url http://192.168.10.3:8080/login.jsp
url-template urlTemplate_0
user-sync
#
4、配置無線認(rèn)證用戶的地址池、網(wǎng)關(guān)及DNS
#
ip pool wifi_user
gateway-list 192.168.10.1
network 192.168.10.0  mask 255.255.255.0
excluded-ip-address 192.168.10.1 192.168.10.40
lease day 0 hour 1 minute 0
dns-list 8.8.8.8
#
5、配置AAA模板
#
aaa
authentication-scheme default
authentication-scheme radius_huawei
authentication-mode radius
authorization-scheme default
accounting-scheme default
accounting-scheme radius_huawei
accounting-mode radius
domain default  
domain default_admin  
domain huawei.com  
authentication-scheme radius_huawei
accounting-scheme radius_huawei
radius-server radius_huawei
local-user admin password cipher %@%@lA9^Vm7sN452P)V;[5<Fcc>(%@%@
local-user admin privilege level 15
local-user admin service-type telnet ssh ftp web http
#
6、配置VLAN2014的地址以及在該Vlan中啟用Portal認(rèn)證
#
interface Vlanif2014
ip address 192.168.10.2 255.255.255.0
web-auth-server portal direct
dhcp select global
#
7、其他配置如下：
#
interface GigabitEthernet0/0/1
port link-type access
port default vlan 2014
#
interface GigabitEthernet0/0/2
port link-type access
port default vlan 2014
#
#
interface GigabitEthernet0/0/24
port link-type trunk
port trunk allow-pass vlan 2014 to 2015
#
interface XGigabitEthernet0/0/1
#
interface XGigabitEthernet0/0/2
#
interface Wlan-Ess0
port hybrid pvid vlan 2014
undo port hybrid vlan 1
port hybrid untagged vlan 2014
permit-domain name huawei.com
force-domain name huawei.com
#
interface Wlan-Ess1
description no_portal
port hybrid pvid vlan 2014
undo port hybrid vlan 1
port hybrid untagged vlan 2014
#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 192.168.10.1
#
    以上即為OSSH免費(fèi)版華為Portal系統(tǒng)與華為AC6605對(duì)接的示例，僅供大家參考，如有問題可以隨時(shí)在官網(wǎng)發(fā)帖咨詢！