当前无线认证为Potal认证,portal的web服务器是AC自带的认证页面,认证账号的是来自Radius服务器,这种情况要如何实现Portal MAC-Trigger快速认证。
wlan service-template local-portal
ssid XXXX-wifi
vlan 2112
client forwarding-location ap
bss transition-management enable
portal enable method direct
portal domain imc_isp
portal bas-ip 177.17.112.2
portal apply web-server Local_Portal
portal apply mac-trigger-server imc
service-template enable
#
interface Vlan-interface1112
ip address 177.17.112.2 255.255.255.0
#
ip route-static 0.0.0.0 0 177.17.112.1
#
#
radius scheme imc_radius
primary authentication 10.178.36.108 key cipher xxxx
primary accounting 10.178.36.108 key cipher xxxx
user-name-format without-domain
nas-ip 177.17.112.2
#
domain imc_isp
authentication portal radius-scheme imc_radius
authorization portal radius-scheme imc_radius
accounting portal none
#
portal host-check enable
portal user log enable
portal redirect log enable
portal logout-record enable
portal free-rule 0 destination ip 10.178.36.0 255.255.255.0
portal free-rule 1 destination ip any udp 53
portal free-rule 2 destination ip any tcp 53
portal free-rule 3 destination ip any tcp 5223
#
portal web-server Local_Portal
url http://177.17.112.2/portal
captive-bypass ios optimize enable
url-parameter MAC source-mac
url-parameter ap-mac ap-mac
url-parameter ssid ssid
url-parameter userurl original-url
url-parameter wlanacname value AC
url-parameter wlanuserip source-address
#
portal local-web-server http
default-logon-page defaultfile.zip
#
portal mac-trigger-server imc
ip 10.178.36.108
#
wlan client bss-load-ie enable
(0)
#配置无感知的名字为localportal,无感知服务器为192.168.100.1,开启本地无感知功能,设置无感知绑定表项的老化时间为1小时
[AC]portal mac-trigger-server localportal
[AC-portal-mac-trigger-server-localportal]ip 192.168.100.1
[AC-portal-mac-trigger-server-localportal]local-binding enable
[AC-portal-mac-trigger-server-localportal]local-binding aging-time 1
(0)
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论