华为AC6005内置portal服务 配置指南.docx

AC6005内置portal服务器配置况西配置方案 模拟测试示意图路由器 L92. 1&S. 1. 1AC 6005vlazti与上联设备通信192. 1B8. 1.254诅皿SS在按钮管理用192. 16S. 08. 1visit 100终端使用192. 168. 100. 1La pto p U设备配置网络配置，vlanif88管理APVlanif100 为业务vlan开启DHCPAC6005dhcp enableInfo: The operation may take a few seconds. Please wait for a moment.done.创建VLAN 88和100AC6005vlan batch 88 100Info: This operation may take a few seconds. Please wait for a moment.done.配置与上行设备通信接口的地址AC6005int Vlanif 1AC6005-Vlanif1ip address 192.168.1.254 255.255.255.0AC6005-Vlanif1dhcp select interfaceAC6005-Vlanif1dhcp server dns-list 61.153.177.196配置VLAN 88和100的网关AC6005int vlan 88AC6005-Vlanif88ip address 192.168.88.1 255.255.255.0AC6005-Vlanif88dhcp select interfaceAC6005int vlan 100AC6005-Vlanif100ip address 192.168.100.1 255.255.255.0AC6005-Vlanif100dhcp select interface为终端分配地址AC6005-Vlanif100dhcp server dns-list 61.153.177.196配置AC与AP相连的端口AC6005int g0/0/8AC6005-GigabitEthernet0/0/8port link-type trunkAC6005-GigabitEthernet0/0/8port trunk pvid vlan 88AC6005-GigabitEthernet0/0/8undo port trunk allow-pass vlan 1AC6005-GigabitEthernet0/0/8port trunk allow-pass vlan 88 100AC6005int g0/0/7AC6005-GigabitEthernet0/0/7port link-type aAC6005-GigabitEthernet0/0/7port link-type accessAC6005-GigabitEthernet0/0/7port default vlan 100AC6005ip route-static 0.0.0.0 0.0.0.0 192.168.1.1创建登录用户AC6005aaaAC6005-aaalocal-user huawei password cipher huawei123Info: Add a new user.创建登录用户最大连接数AC6005-aaalocal-user huawei access-limit 5开启portal的web访问认证功，配置内置>0心1的SSL策略和端口号03已经被web端 口启用，不可用)AC6005portal local-server ip 192.168.100.1AC6005portal local-server https ssl-policy default_policy port 2000Info: Load web file successfully.配置免认证规则AC6005portal free-rule 0 destination ip 61.153.177.196 mask 255.255.255.255Info: This free rule configured successfully, only <0-63> can be commit to AP.配置wlan-ess接口，在接口调用内置>0吐口1与允许的认证域AC6005interface Wlan-Ess 1AC6005-Wlan-Ess1port hybrid pvid vlan 100AC6005-Wlan-Ess1port hybrid untagged vlan 100AC6005-Wlan-Ess1portal local-server enableAC6005-Wlan-Ess1permit-domain name default配置AC与AP之间的隧道通信AC6005wlanAC6005-wlan-viewwlan ac source interface Vlanif 88配置AP的认证方式为免认证AC6005-wlan-viewap-auth-mode no-auth查看APAC6005-wlan-viewdis ap allAll AP information(Normal-1,UnNormal-0):APAPAPProfileAPAP/RegionIDTypeMACIDStateSysname0 AP6310SN-GN4862-7602-35d00/0 normalap-0Total number: 1配置名为wmml的wmm模板，参数采用默认AC6005-wlan-viewwmm-profile name wmm1 id 1配置名为/adloW的radio模板，参数采用默认，调用血巾模板AC6005-wlan-viewradio-profile name radio1 id 1、AC6005-wlan-radio-prof-radio1wmm-profile id 1配置名为traffics的traffic模板，参数采用默认AC6005-wlan-viewtraffic-profile name traffic1 id 1配置名为security的安全模板，认证方式为VEP认证，开放认证，不加密AC6005-wlan-viewsecurity-profile name scurity1 id 1创建名为service的服务集，并绑定流量模板和安全模板wlan-ess接口AC6005-wlan-viewservice-set name service1 id 1AC6005-wlan-service-set-service1wlan-ess 1AC6005-wlan-service-set-service1ssid AC6005-wlan-service-set-service1traffic-profile id 1AC6005-wlan-service-set-service1security-profile id 1AC6005-wlan-service-set-service1service-vlan 100Info: This action may cause service interruption if you don't execute commit command.配置AP对应的VAP，下发Wlan服务，AC6005-wlan-viewap 0 radio 0AC6005-wlan-radio-0/0radio-profile id 1Warning: Modify the Radio type may cause some parameters of Radio resume default value, are you sure to continue?Y/N:yAC6005-wlan-radio-0/0service-set id 1 wlan 1下发AP的WLAN配置AC6005-wlan-viewcommit allWarning: Committing configuration may cause service interruption,continue?Y/Ny搜索SSID测试成功