WX3510H-版本R5471，对接华为NCE认证平台

现象：

1、dot1x对接没问题

2、portal认证能成功，但是过一会手机会自动弹出认证界面，需要重现输入账号密码的。portal无感知认证功能不行

AC-IP:10.x.y.2

huawei认证服务器地址：10.x.x.110

集中转发

配置：

#

wlan service-template 2

 ssid Testmobile-h3c

 vlan 506

 user-isolation enable

 client-rate-limit inbound mode static cir 10240

 client-rate-limit outbound mode static cir 10240

 portal enable method direct

 portal domain macportal

 portal bas-ip 10.x.y.2

 portal apply web-server macportal

 portal apply web-server macportal_backup secondary

 portal apply mac-trigger-server macportal

 portal temp-pass period 20 enable

 service-template enable

#

#

radius scheme macportal

 primary authentication 10.x.x.110

 primary accounting 10.x.x.110

 accounting-on enable

 key authentication cipher $c$3$vmZmIEVVIvN38LstQ4bLLAkvnAOcQnrU

 key accounting cipher $c$3$DpJ7RXdz/iYr+/QpXc+q8+uvLjUNBvyM

 user-name-format without-domain

 nas-ip 10.x.y.2

#

#

domain macportal

 authorization-attribute idle-cut 10 1024

 authentication portal radius-scheme macportal

 authorization portal radius-scheme macportal

 accounting portal radius-scheme macportal

#

 portal free-rule 0 source ip any destination ip 10.x.x.110 255.255.255.255(huawei 认证服务器地址)

 portal free-rule 1 source ip any destination ip 10.x.x.x 255.255.255.255

 portal free-rule 2 source ip any destination ip 10.xx.x 255.255.255.255

 portal free-rule 20 destination ip any udp 53

 portal free-rule 21 destination ip any tcp 53

 portal free-rule 22 destination ip any tcp 5223

 portal free-rule 24 source ip any destination ip 10.x.x.xx 255.255.255.255(DNS1)

 portal free-rule 25 source ip any destination ip 10.x.x.xx 255.255.255.255(DNS2)

 portal free-rule 30 destination ip any udp 8445

 portal free-rule 31 destination ip any tcp 8445

 portal free-rule 32 destination ip any tcp 19008

 portal safe-redirect enable

 portal safe-redirect method get post

 portal safe-redirect user-agent Android

 portal safe-redirect user-agent xx

 portal safe-redirect user-agent xx

 portal safe-redirect user-agent xx

 portal safe-redirect user-agent xx

 portal safe-redirect user-agent xx

 portal safe-redirect user-agent iPhone

 portal safe-redirect user-agent xx

#

#

portal web-server macportal

 url http://10.x.x.110:8445/portal

 captive-bypass enable

 url-parameter ac-ip value 10.x.y.2

 url-parameter redirect-url original-url

 url-parameter ssid ssid

 url-parameter uaddress source-address

 url-parameter umac source-mac

#

portal server macportal

 ip 10.x.x.110 key cipher $c$3$9OlFro3mlyn5S+eOO72glAj7aVKXXGLn

 port 50200

#

portal mac-trigger-server macportal

 ip 10.x.x.110

#