华为AC6605与OSSH免费版华为Portal系统的对
OSSH免費(fèi)版華為Portal系統(tǒng)支持華為Portal協(xié)議,能夠跟市面上支持華為協(xié)議的設(shè)備進(jìn)行對接,方便的實(shí)現(xiàn)Web Portal認(rèn)證。下面我們介紹華為主流6605系列AC同OSSH免費(fèi)版華為Portal的對接示例,僅供大家參考。
網(wǎng)絡(luò)拓?fù)淙缦?/span>:
配置說明:
1、將無線認(rèn)證用戶及設(shè)備劃分到VLAN2014
#
vlan 2014
description user_vlan
#
2、配置Radius認(rèn)證模板
#
radius-server templateradius_huawei
radius-servershared-key cipher %@%@,%+K=Sl9NOmxy2@J~"X//97v%@%@
radius-serverauthentication 192.168.10.3 1812 weight 80
radius-serveraccounting 192.168.10.3 1813 weight 80
undo radius-serveruser-name domain-included
#
#
url-template nameurlTemplate_0
#
3、配置Portal認(rèn)證對接的參數(shù)
#
web-auth-serverportal
server-ip192.168.10.3
port 50100
shared-key cipher%@%@qfU0XjxGk-{_|i"4x;<,/v~S%@%@
url http: ?//192.168.10.3:8080/login.jsp
url-templateurlTemplate_0
user-sync
#
4、配置無線認(rèn)證用戶的地址池、網(wǎng)關(guān)及DNS
#
ip pool wifi_user
gateway-list192.168.10.1
network 192.168.10.0 mask255.255.255.0
excluded-ip-address192.168.10.1 192.168.10.40
lease day 0 hour 1minute 0
dns-list 8.8.8.8
#
5、配置AAA模板
#
aaa
authentication-scheme default
authentication-scheme radius_huawei
authentication-mode radius
authorization-scheme default
accounting-scheme default
accounting-scheme radius_huawei
accounting-mode radius
domain default
domain default_admin ?
domain huawei.com ?
authentication-scheme radius_huawei
accounting-scheme radius_huawei
radius-server radius_huawei
local-user admin password cipher%@%@lA9^Vm7sN452P)V;[5<Fcc>(%@%@
local-user admin privilege level 15
local-user admin service-type telnet ssh ftpweb http
#
6、配置VLAN2014的地址以及在該Vlan中啟用Portal認(rèn)證
#
interfaceVlanif2014
ip address 192.168.10.2255.255.255.0
web-auth-serverportal direct
dhcp select global
#
7、其他配置如下:
#
interfaceGigabitEthernet0/0/1
port link-typeaccess
port default vlan2014
#
interfaceGigabitEthernet0/0/2
port link-typeaccess
port default vlan2014
#
#
interfaceGigabitEthernet0/0/24
port link-typetrunk
port trunkallow-pass vlan 2014 to 2015
#
interfaceXGigabitEthernet0/0/1
#
interfaceXGigabitEthernet0/0/2
#
interface Wlan-Ess0
port hybrid pvidvlan 2014
undo port hybridvlan 1
port hybriduntagged vlan 2014
permit-domain namehuawei.com
force-domain namehuawei.com
#
interface Wlan-Ess1
descriptionno_portal
port hybrid pvidvlan 2014
undo port hybridvlan 1
port hybriduntagged vlan 2014
#
interface NULL0
#
ip route-static0.0.0.0 0.0.0.0 192.168.10.1
#
以上即為OSSH免費(fèi)版華為Portal系統(tǒng)與華為AC6605對接的示例,僅供大家參考,如有問題可以隨時聯(lián)系我們,QQ群:195323074 ?群內(nèi)有下載地址。
轉(zhuǎn)載于:https://blog.51cto.com/osshe/1353114
總結(jié)
以上是生活随笔為你收集整理的华为AC6605与OSSH免费版华为Portal系统的对的全部內(nèi)容,希望文章能夠幫你解決所遇到的問題。
- 上一篇: gzcms技术开发文档
- 下一篇: oracle 11g rac asm磁盘