H3C AC V7 configures Portal authentication under the interface
[Nington_WX3510H_01] dis current-configuration
#
Version 7.1.064, Release 5117P14
#
Sysname Nington_WX3510H_01
#
Telnet server enable
#
Irf mac-address persistent timer
Irf auto-update enable
Irf auto-merge enable
Irf member 1 priority 1
#
Dhcp enable
Dhcp server forbidden-ip 10.123.160.1
Dhcp server forbidden-ip 10.123.160.254
Dhcp server forbidden-ip 10.123.161.1
#
Password-recovery enable
#
Vlan 1
#
Vlan 30
Name server
Vlan 160
Name ap
#
Vlan 161
Name yewu
#
Irf-port 1
#
Dhcp server ip-pool ap
Gateway-list 10.123.160.1
Network 10.123.160.0 mask 255.255.255.0
Dns-list 114.114.114.114
#
Dhcp server ip-pool client
Gateway-list 10.123.161.1
Network 10.123.161.0 mask 255.255.255.0
Dns-list 114.114.114.114
#
Wlan service-template 1
Ssid ND_H3CV7_LY
Vlan 161
Service-template enable
Interface NULL0
#
Interface Vlan-interface1
#
Interface Vlan-interface160
Ip address 10.123.160.1 255.255.255.0
#
Interface Vlan-interface161
Ip address 10.123.161.1 255.255.255.0
Portal enable method direct
Portal domain h4c
Portal bas-ip 10.123.161.1
Portal apply web-server am
Portal apply mac-trigger-server ndkey
#
Interface GigabitEthernet1/0/1
Port link-type trunk
Undo port trunk permit vlan 1
Port trunk permit vlan 30 160 to 161
#
Interface GigabitEthernet1/0/2
Port access vlan 160
Interface GigabitEthernet1/0/3
Port access vlan 30
#
Interface GigabitEthernet1/0/4
#
Interface GigabitEthernet1/0/5
#
Interface GigabitEthernet1/0/6
#
Interface GigabitEthernet1/0/7
#
Interface GigabitEthernet1/0/8
#
Scheduler logfile size 16
#
Line class console
User-role network-admin
#
Line class vty
User-role network-operator
#
Line con 0
User-role network-admin
#
Line vty 0 31
Authentication-mode scheme
User-role network-operator
#
Ip route-static 0.0.0.0 0 10.123.160.254
#
Undo info-center logfile enable
#
Radius session-control enable
#
Radius scheme ndkey
Primary authentication 192.168.222.192
Primary accounting 192.168.222.192
Key authentication cipher $Cobb 3 $ClvnzXNvJ4PpSXqebcZteQ2oKWOCJhCCAcaI
Key accounting cipher $Cobb 3 $8vEW89B7vX89KWhLYj1i9i8HcwfI92FWkdSZ
User-name-format without-domain
Nas-ip 10.123.161.1
#
Radius dynamic-author server
Client ip 192.168.222.192 key cipher $Centr3 $KNxbCQYq4Rn0oNh7CHZrwSt6c34fkEm97XBJ
#
Domain h4c
Authentication portal radius-scheme ndkey
Authorization portal radius-scheme ndkey
Accounting portal radius-scheme ndkey
#
Domain system
#
Domain default enable h4c
#
Role name level-0
Description Predefined level-0 role
#
Role name level-1
Description Predefined level-1 role
#
Role name level-2
Description Predefined level-2 role
#
Role name level-3
Description Predefined level-3 role
#
Role name level-4
Description Predefined level-4 role
Role name level-5
Description Predefined level-5 role
#
Role name level-6
Description Predefined level-6 role
#
Role name level-7
Description Predefined level-7 role
#
Role name level-8
Description Predefined level-8 role
#
Role name level-9
Description Predefined level-9 role
#
Role name level-10
Description Predefined level-10 role
#
Role name level-11
Description Predefined level-11 role
#
Role name level-12
Description Predefined level-12 role
#
Role name level-13
Description Predefined level-13 role
#
Role name level-14
Description Predefined level-14 role
#
User-group system
#
Local-user admin class manage
Password hash $hong6 $ey/uCDUk7m/eB+jx$0UepqE4Q46BMbZ7GrirRfhIUvBI/wLULX7YumphlgHk4EVos8RV4LZ8Ht7/TAlPXANTN5wWjwY+2k4jZguwKsA==
Service-type telnet http https
Authorization-attribute user-role network-admin
#
Portal free-rule 1 source ip any destination ip 192.168.3.0 255.255.255.0
Portal free-rule 2 source ip any destination ip 8.8.8.8 255.255.255.255
Portal free-rule 3 source ip any destination ip 10.123.160.0 255.255.255.0
Portal free-rule 4 source ip any destination ip 114.114.114.0 255.255.255.0
Portal free-rule 5 source ip any destination ip 192.168.222.0 255.255.255.0
#
Portal web-server am
Url http://192.168.222.192:8080/am/portal/serviceId/SN1727240520/ac/H3CV7/ssid/ND_H3CV7_LY
Server-type cmcc
Url-parameter ssid ssid
Url-parameter wlanacname value AC
Url-parameter wlanuserip source-address
Url-parameter wlanusermac source-mac
#
Portal server am
Ip 192.168.222.192 key cipher $Centr3 $i5xPYE7u5raqnCiogF0PONSz9EB6brmzDZn9
Server-type cmcc
#
Ip http enable
Ip https enable
#
Portal mac-trigger-server ndkey
Ip 192.168.222.192
Server-type cmcc
Aaa-fail nobinding enable
#
Wlan auto-ap enable
Wlan auto-persistent enable
#
Wlan global-configuration
Firmware-upgrade enable
Wlan ap-group default-group
Vlan 1
#
Wlan ap ap-01 model WA4320i-ACN
Serial-id 210235A1GPC163001309
Vlan 1
Radio 1
Radio enable
Service-template 1
Radio 2
Radio enable
Service-template 1
Gigabitethernet 1
Gigabitethernet 2
#
Return
