华为9700S AC对接OpenPortal网络准入认证

-----

#
authentication-profile name macportal_authen_profile
 mac-access-profile mac_access_profile
 portal-access-profile portal1
 free-rule-template default_free_rule
 authentication-scheme radius
 accounting-scheme scheme1
 radius-server radius_guest
#
radius-server template radius_guest
 radius-server shared-key cipher portal
 radius-server authentication 192.168.160.33 1812
 radius-server accounting 192.168.160.33 1813
#
free-rule-template name default_free_rule  default_free_rule
 free-rule 0 destination ip 192.168.160.0 mask 255.255.255.0 source any
 free-rule 2 destination ip 10.10.100.0 mask 255.255.255.0 source any
 free-rule 3 destination ip 114.114.114.114 mask 255.255.255.255 source any
 free-rule 4 destination any source ip 192.168.160.0 mask 255.255.255.0
 free-rule 6 destination any source ip 10.10.100.0 mask 255.255.255.0
 free-rule 7 destination any source ip 114.114.114.114 mask 255.255.255.255
#
url-template name portal                  
 url http://192.168.160.33
 url-parameter ssid ssid user-ipaddress wlanuserip user-mac mac sysname nasname redirect-url url ap-mac apmac
 url-parameter mac-address format delimiter : normal
#
web-auth-server portal
 server-ip 192.168.160.33
 port 50100
 shared-key cipher portal
 url http://192.168.160.33
 url-template portal
 source-ip 10.10.100.51
#
portal-access-profile name portal_access_profile
 web-auth-server portal direct
#
aaa
 authentication-scheme radius
  authentication-mode radius
 accounting-scheme scheme1
  accounting-mode radius

#
wlan
  vap-profile name zhanding_guest
  service-vlan vlan-id 140
  ssid-profile zhanding_guest             
  security-profile zhanding_guest
  authentication-profile macportal_authen_profile
  vap-profile name zhanding_office

#openportal一键脚本安装 centos7 （192.168.160.33）

Portal设置->BAS IP*10.10.100.51->...默认

Radius管理->Radius NAS 地址：10.10.100.51 ->密钥xxxxxx

接入帐户管理->添加用户