华三交换/AC/AP与Windows Radius无线动态vlan认证及配置

还是之前的问题，研究了好几天依旧没有解决。

需求为：  

针对无线用户，使用AD域用户验证后，获取对应vlan的IP地址。  

配置环境如下：

S5500核心+S5130POE+WX2560H AC+WA4320H AP+Windows AD/DNS/DHCP+Windows NPS(Radius)

目前配置完成后验证框能跳出，AD域用户验证后失败。

debugging、AC及核心配置见附件（贴配置乱行、配置挂附件怎么看不到呢？）

<WX2560H>*Feb 15 09:55:13:666 2019 WX2560H RADIUS/7/EVENT: PAM_RADIUS: Processing RADIUS authentication. *Feb 15 09:55:13:666 2019 WX2560H RADIUS/7/EVENT: PAM_RADIUS: Sent authentication request successfully. *Feb 15 09:55:13:666 2019 WX2560H RADIUS/7/EVENT: Processing AAA request data. *Feb 15 09:55:13:666 2019 WX2560H RADIUS/7/EVENT: Got request data successfully, primitive: authentication. *Feb 15 09:55:13:666 2019 WX2560H RADIUS/7/EVENT: Getting RADIUS server info. *Feb 15 09:55:13:666 2019 WX2560H RADIUS/7/EVENT: Got RADIUS server info successfully. *Feb 15 09:55:13:666 2019 WX2560H RADIUS/7/EVENT: Created request context successfully. *Feb 15 09:55:13:667 2019 WX2560H RADIUS/7/EVENT: Created request packet successfully, dstIP: 192.168.20.2, dstPort: 1812, VPN instance: --(public), socketFd: 149, pktID: 221. *Feb 15 09:55:13:667 2019 WX2560H RADIUS/7/EVENT: Added packet socketfd to epoll successfully, socketFd: 149. *Feb 15 09:55:13:667 2019 WX2560H RADIUS/7/EVENT: Mapped PAM item to RADIUS attribute successfully. *Feb 15 09:55:13:667 2019 WX2560H RADIUS/7/EVENT: Got RADIUS username format successfully, format: 0. *Feb 15 09:55:13:667 2019 WX2560H RADIUS/7/EVENT: Added attribute user-name successfully, user-name: host/***.***. *Feb 15 09:55:13:668 2019 WX2560H RADIUS/7/EVENT: Filled RADIUS attributes in packet successfully. *Feb 15 09:55:13:668 2019 WX2560H RADIUS/7/EVENT: Composed request packet successfully. *Feb 15 09:55:13:668 2019 WX2560H RADIUS/7/EVENT: Created response timeout timer successfully. *Feb 15 09:55:13:668 2019 WX2560H RADIUS/7/PACKET: User-Name="host/***.***" Service-Type=Framed-User Framed-Protocol=PPP NAS-Identifier="WX2560H" NAS-Port=1 NAS-Port-Type=Wireless-802.11 NAS-Port- Calling-Station- Called-Station- Acct-Session- H3c-User-Vlan-Id=1 EAP-Message=0x0201002901686f73742f4d494e494e542d41524c344738532e636f72702e636f6e746f736f2e636f6d Message-Authenticator=0x00000000000000000000000000000000 Framed-MTU=1450 H3c-Ip-Host-Addr="0.0.0.0 c8:3d:d4:f0:79:99" NAS-IP-Address=192.168.10.252 H3c-Product- H3c-Nas-Startup-Timestamp=1550152201 *Feb 15 09:55:13:669 2019 WX2560H RADIUS/7/EVENT: Sent request packet successfully. *Feb 15 09:55:13:669 2019 WX2560H RADIUS/7/PACKET: 01 dd 01 52 1b 7d 6c 79 4b c3 d5 ec f9 87 dd 33 28 50 38 eb 01 26 68 6f 73 74 2f 4d 49 4e 49 4e 54 2d 41 52 4c 34 47 38 53 2e 63 6f 72 70 2e 63 6f 6e 74 6f 73 6f 2e 63 6f 6d 06 06 00 00 00 02 07 06 00 00 00 01 20 09 57 58 32 35 36 30 48 05 06 00 00 00 01 3d 06 00 00 00 13 57 0b 56 4c 41 4e 49 44 3d 31 3b 1f 13 43 38 2d 33 44 2d 44 34 2d 46 30 2d 37 39 2d 39 39 1e 1c 33 38 2d 41 44 2d 42 45 2d 35 38 2d 44 36 2d 41 30 3a 73 65 72 76 69 63 65 31 2c 28 30 30 30 30 30 30 30 34 32 30 31 39 30 32 31 35 30 39 35 35 31 33 30 30 30 30 30 30 30 66 30 38 31 30 30 31 39 32 1a 0c 00 00 63 a2 85 06 00 00 00 01 4f 2b 02 01 00 29 01 68 6f 73 74 2f 4d 49 4e 49 4e 54 2d 41 52 4c 34 47 38 53 2e 63 6f 72 70 2e 63 6f 6e 74 6f 73 6f *Feb 15 09:55:13:670 2019 WX2560H RADIUS/7/PACKET: 2e 63 6f 6d 50 12 fe e1 a8 43 04 2f 0c 16 b2 6a 8c 15 db 64 fb fd 0c 06 00 00 05 aa 1a 21 00 00 63 a2 3c 1b 30 2e 30 2e 30 2e 30 20 63 38 3a 33 64 3a 64 34 3a 66 30 3a 37 39 3a 39 39 04 06 c0 a8 0a fc 1a 13 00 00 63 a2 ff 0d 48 33 43 20 57 58 32 35 36 30 48 1a 0c 00 00 63 a2 3b 06 5c 65 72 09 *Feb 15 09:55:13:670 2019 WX2560H RADIUS/7/EVENT: Sent request packet and create request context successfully. *Feb 15 09:55:13:670 2019 WX2560H RADIUS/7/EVENT: Added request context to global table successfully. *Feb 15 09:55:13:670 2019 WX2560H RADIUS/7/EVENT: Processing AAA request data. *Feb 15 09:55:17:465 2019 WX2560H RADIUS/7/EVENT: Response timed out. *Feb 15 09:55:17:465 2019 WX2560H RADIUS/7/EVENT: Found request context, dstIP: 192.168.20.2; dstPort: 1812; VPN instance: --(public); socketfd: 149; pktID:221. *Feb 15 09:55:17:466 2019 WX2560H RADIUS/7/EVENT: Retransmitting request packet, currentTries: 2, maxTries: 3. *Feb 15 09:55:18:758 2019 WX2560H RADIUS/7/EVENT: PAM_RADIUS: Processing RADIUS authentication. *Feb 15 09:55:18:758 2019 WX2560H RADIUS/7/EVENT: PAM_RADIUS: Sent authentication request successfully. *Feb 15 09:55:18:758 2019 WX2560H RADIUS/7/EVENT: Processing AAA request data. *Feb 15 09:55:18:758 2019 WX2560H RADIUS/7/EVENT: Got request data successfully, primitive: authentication. *Feb 15 09:55:18:758 2019 WX2560H RADIUS/7/EVENT: Getting RADIUS server info. *Feb 15 09:55:18:758 2019 WX2560H RADIUS/7/EVENT: Got RADIUS server info successfully. *Feb 15 09:55:18:759 2019 WX2560H RADIUS/7/EVENT: Created request context successfully. *Feb 15 09:55:18:759 2019 WX2560H RADIUS/7/EVENT: Created request packet successfully, dstIP: 192.168.20.2, dstPort: 1812, VPN instance: --(public), socketFd: 149, pktID: 222. *Feb 15 09:55:18:759 2019 WX2560H RADIUS/7/EVENT: Added packet socketfd to epoll successfully, socketFd: 149. *Feb 15 09:55:18:759 2019 WX2560H RADIUS/7/EVENT: Mapped PAM item to RADIUS attribute successfully. *Feb 15 09:55:18:759 2019 WX2560H RADIUS/7/EVENT: Got RADIUS username format successfully, format: 0. *Feb 15 09:55:18:759 2019 WX2560H RADIUS/7/EVENT: Added attribute user-name successfully, user-name: host/***.***. *Feb 15 09:55:18:760 2019 WX2560H RADIUS/7/EVENT: Filled RADIUS attributes in packet successfully. *Feb 15 09:55:18:760 2019 WX2560H RADIUS/7/EVENT: Composed request packet successfully. *Feb 15 09:55:18:760 2019 WX2560H RADIUS/7/EVENT: Created response timeout timer successfully. *Feb 15 09:55:18:760 2019 WX2560H RADIUS/7/PACKET: User-Name="host/***.***" Service-Type=Framed-User Framed-Protocol=PPP NAS-Identifier="WX2560H" NAS-Port=1 NAS-Port-Type=Wireless-802.11 NAS-Port- Calling-Station- Called-Station- Acct-Session- H3c-User-Vlan-Id=1 EAP-Message=0x0202002901686f73742f4d494e494e542d41524c344738532e636f72702e636f6e746f736f2e636f6d Message-Authenticator=0x00000000000000000000000000000000 Framed-MTU=1450 H3c-Ip-Host-Addr="0.0.0.0 c8:3d:d4:f0:79:99" NAS-IP-Address=192.168.10.252 H3c-Product- H3c-Nas-Startup-Timestamp=1550152201 *Feb 15 09:55:18:761 2019 WX2560H RADIUS/7/EVENT: Sent request packet successfully. *Feb 15 09:55:18:761 2019 WX2560H RADIUS/7/PACKET: 01 de 01 52 28 1f d8 f9 7f 1f 5e 09 8d 96 2e b3 a4 ae 38 6d 01 26 68 6f 73 74 2f 4d 49 4e 49 4e 54 2d 41 52 4c 34 47 38 53 2e 63 6f 72 70 2e 63 6f 6e 74 6f 73 6f 2e 63 6f 6d 06 06 00 00 00 02 07 06 00 00 00 01 20 09 57 58 32 35 36 30 48 05 06 00 00 00 01 3d 06 00 00 00 13 57 0b 56 4c 41 4e 49 44 3d 31 3b 1f 13 43 38 2d 33 44 2d 44 34 2d 46 30 2d 37 39 2d 39 39 1e 1c 33 38 2d 41 44 2d 42 45 2d 35 38 2d 44 36 2d 41 30 3a 73 65 72 76 69 63 65 31 2c 28 30 30 30 30 30 30 30 34 32 30 31 39 30 32 31 35 30 39 35 35 31 33 30 30 30 30 30 30 30 66 30 38 31 30 30 31 39 32 1a 0c 00 00 63 a2 85 06 00 00 00 01 4f 2b 02 02 00 29 01 68 6f 73 74 2f 4d 49 4e 49 4e 54 2d 41 52 4c 34 47 38 53 2e 63 6f 72 70 2e 63 6f 6e 74 6f 73 6f *Feb 15 09:55:18:762 2019 WX2560H RADIUS/7/PACKET: 2e 63 6f 6d 50 12 c0 d1 d1 27 48 01 81 26 ee 6d 04 de a5 c5 e2 db 0c 06 00 00 05 aa 1a 21 00 00 63 a2 3c 1b 30 2e 30 2e 30 2e 30 20 63 38 3a 33 64 3a 64 34 3a 66 30 3a 37 39 3a 39 39 04 06 c0 a8 0a fc 1a 13 00 00 63 a2 ff 0d 48 33 43 20 57 58 32 35 36 30 48 1a 0c 00 00 63 a2 3b 06 5c 65 72 09 *Feb 15 09:55:18:762 2019 WX2560H RADIUS/7/EVENT: Sent request packet and create request context successfully. *Feb 15 09:55:18:762 2019 WX2560H RADIUS/7/EVENT: Added request context to global table successfully. *Feb 15 09:55:18:762 2019 WX2560H RADIUS/7/EVENT: Processing AAA request data. *Feb 15 09:55:20:466 2019 WX2560H RADIUS/7/EVENT: Response timed out. *Feb 15 09:55:20:466 2019 WX2560H RADIUS/7/EVENT: Found request context, dstIP: 192.168.20.2; dstPort: 1812; VPN instance: --(public); socketfd: 149; pktID:221. *Feb 15 09:55:20:467 2019 WX2560H RADIUS/7/EVENT: Retransmitting request packet, currentTries: 3, maxTries: 3. *Feb 15 09:55:22:465 2019 WX2560H RADIUS/7/EVENT: Response timed out. *Feb 15 09:55:22:465 2019 WX2560H RADIUS/7/EVENT: Found request context, dstIP: 192.168.20.2; dstPort: 1812; VPN instance: --(public); socketfd: 149; pktID:222. *Feb 15 09:55:22:466 2019 WX2560H RADIUS/7/EVENT: Retransmitting request packet, currentTries: 2, maxTries: 3. *Feb 15 09:55:23:465 2019 WX2560H RADIUS/7/EVENT: Response timed out. *Feb 15 09:55:23:465 2019 WX2560H RADIUS/7/EVENT: Found request context, dstIP: 192.168.20.2; dstPort: 1812; VPN instance: --(public); socketfd: 149; pktID:221. *Feb 15 09:55:23:466 2019 WX2560H RADIUS/7/EVENT: Reached the maximum retries. *Feb 15 09:55:23:466 2019 WX2560H RADIUS/7/EVENT: Set status of server to block successfully. serverIP: 192.168.20.2, serverPort: 1812. *Feb 15 09:55:23:466 2019 WX2560H RADIUS/7/EVENT: Got next server failed. *Feb 15 09:55:23:466 2019 WX2560H RADIUS/7/EVENT: Sent reply error message to PAM. *Feb 15 09:55:23:467 2019 WX2560H RADIUS/7/EVENT: Sent reply message successfully. *Feb 15 09:55:23:467 2019 WX2560H RADIUS/7/EVENT: Received status of server changing event. *Feb 15 09:55:23:468 2019 WX2560H RADIUS/7/EVENT: Aaad sent notification about the change of server status to application process successfully. Server state: block. *Feb 15 09:55:23:640 2019 WX2560H RADIUS/7/EVENT: Application process reveived the notification about the change of server status from aaad process. Server state: block. *Feb 15 09:55:23:702 2019 WX2560H RADIUS/7/EVENT: Application process reveived the notification about the change of server status from aaad process. Server state: block. %Feb 15 09:55:23:768 2019 WX2560H DOT1X/5/DOT1X_WLAN_LOGIN_FAILURE: -Username=host/***.***-UserMAC=c83d-d4f0-7999-BSSID=38ad-be58-d6a0-SSID=service1-VLANID=1; A user failed 802.1X authentication. *Feb 15 09:55:23:967 2019 WX2560H RADIUS/7/EVENT: Application process reveived the notification about the change of server status from aaad process. Server state: block. *Feb 15 09:55:24:465 2019 WX2560H RADIUS/7/EVENT: Application process reveived the notification about the change of server status from aaad process. Server state: block. *Feb 15 09:55:25:466 2019 WX2560H RADIUS/7/EVENT: Response timed out. *Feb 15 09:55:25:466 2019 WX2560H RADIUS/7/EVENT: Found request context, dstIP: 192.168.20.2; dstPort: 1812; VPN instance: --(public); socketfd: 149; pktID:222. *Feb 15 09:55:25:467 2019 WX2560H RADIUS/7/EVENT: Retransmitting request packet, currentTries: 3, maxTries: 3. *Feb 15 09:55:28:465 2019 WX2560H RADIUS/7/EVENT: Response timed out. *Feb 15 09:55:28:465 2019 WX2560H RADIUS/7/EVENT: Found request context, dstIP: 192.168.20.2; dstPort: 1812; VPN instance: --(public); socketfd: 149; pktID:222. *Feb 15 09:55:28:466 2019 WX2560H RADIUS/7/EVENT: Reached the maximum retries. *Feb 15 09:55:28:466 2019 WX2560H RADIUS/7/EVENT: Set status of server to block successfully. serverIP: 192.168.20.2, serverPort: 1812. *Feb 15 09:55:28:466 2019 WX2560H RADIUS/7/EVENT: Got next server failed. *Feb 15 09:55:28:466 2019 WX2560H RADIUS/7/EVENT: Sent reply error message to PAM. *Feb 15 09:55:28:467 2019 WX2560H RADIUS/7/EVENT: Sent reply message successfully. *Feb 15 09:55:28:467 2019 WX2560H RADIUS/7/EVENT: Received status of server changing event. *Feb 15 09:55:35:606 2019 WX2560H RADIUS/7/EVENT: PAM_RADIUS: Processing RADIUS authentication. *Feb 15 09:55:35:606 2019 WX2560H RADIUS/7/EVENT: PAM_RADIUS: Sent authentication request successfully. *Feb 15 09:55:35:606 2019 WX2560H RADIUS/7/EVENT: Processing AAA request data. *Feb 15 09:55:35:606 2019 WX2560H RADIUS/7/EVENT: Got request data successfully, primitive: authentication. *Feb 15 09:55:35:606 2019 WX2560H RADIUS/7/EVENT: Getting RADIUS server info. *Feb 15 09:55:35:607 2019 WX2560H RADIUS/7/EVENT: Got RADIUS server info successfully. *Feb 15 09:55:35:607 2019 WX2560H RADIUS/7/EVENT: Created request context successfully. *Feb 15 09:55:35:607 2019 WX2560H RADIUS/7/EVENT: Created request packet successfully, dstIP: 192.168.20.2, dstPort: 1812, VPN instance: --(public), socketFd: 149, pktID: 90. *Feb 15 09:55:35:607 2019 WX2560H RADIUS/7/EVENT: Added packet socketfd to epoll successfully, socketFd: 149. *Feb 15 09:55:35:607 2019 WX2560H RADIUS/7/EVENT: Mapped PAM item to RADIUS attribute successfully. *Feb 15 09:55:35:608 2019 WX2560H RADIUS/7/EVENT: Got RADIUS username format successfully, format: 0. *Feb 15 09:55:35:608 2019 WX2560H RADIUS/7/EVENT: Added attribute user-name successfully, user-name: CORP\it01. *Feb 15 09:55:35:608 2019 WX2560H RADIUS/7/EVENT: Filled RADIUS attributes in packet successfully. *Feb 15 09:55:35:608 2019 WX2560H RADIUS/7/EVENT: Composed request packet successfully. *Feb 15 09:55:35:608 2019 WX2560H RADIUS/7/EVENT: Created response timeout timer successfully. *Feb 15 09:55:35:609 2019 WX2560H RADIUS/7/PACKET: User-Name="CORP\\it01" Service-Type=Framed-User Framed-Protocol=PPP NAS-Identifier="WX2560H" NAS-Port=1 NAS-Port-Type=Wireless-802.11 NAS-Port- Calling-Station- Called-Station- Acct-Session- H3c-User-Vlan-Id=1 EAP-Message=0x0201000e01434f52505c69743031 Message-Authenticator=0x00000000000000000000000000000000 Framed-MTU=1450 H3c-Ip-Host-Addr="0.0.0.0 c8:3d:d4:f0:79:99" NAS-IP-Address=192.168.10.252 H3c-Product- H3c-Nas-Startup-Timestamp=1550152201 *Feb 15 09:55:35:609 2019 WX2560H RADIUS/7/EVENT: Sent request packet successfully. *Feb 15 09:55:35:610 2019 WX2560H RADIUS/7/PACKET: 01 5a 01 1c 69 27 65 81 b1 8b 60 ae 9a ee a1 01 7c 20 47 6a 01 0b 43 4f 52 50 5c 69 74 30 31 06 06 00 00 00 02 07 06 00 00 00 01 20 09 57 58 32 35 36 30 48 05 06 00 00 00 01 3d 06 00 00 00 13 57 0b 56 4c 41 4e 49 44 3d 31 3b 1f 13 43 38 2d 33 44 2d 44 34 2d 46 30 2d 37 39 2d 39 39 1e 1c 33 38 2d 41 44 2d 42 45 2d 35 38 2d 44 36 2d 41 30 3a 73 65 72 76 69 63 65 31 2c 28 30 30 30 30 30 30 30 34 32 30 31 39 30 32 31 35 30 39 35 35 33 35 30 30 30 30 30 30 31 30 30 38 31 30 30 31 39 32 1a 0c 00 00 63 a2 85 06 00 00 00 01 4f 10 02 01 00 0e 01 43 4f 52 50 5c 69 74 30 31 50 12 70 d2 f9 e9 fa cb 67 1c 35 d5 48 e9 80 e6 5f ce 0c 06 00 00 05 aa 1a 21 00 00 63 a2 3c 1b 30 2e 30 2e 30 2e 30 20 63 38 3a 33 64 3a 64 34 3a 66 *Feb 15 09:55:35:610 2019 WX2560H RADIUS/7/PACKET: 30 3a 37 39 3a 39 39 04 06 c0 a8 0a fc 1a 13 00 00 63 a2 ff 0d 48 33 43 20 57 58 32 35 36 30 48 1a 0c 00 00 63 a2 3b 06 5c 65 72 09 *Feb 15 09:55:35:610 2019 WX2560H RADIUS/7/EVENT: Sent request packet and create request context successfully. *Feb 15 09:55:35:610 2019 WX2560H RADIUS/7/EVENT: Added request context to global table successfully. *Feb 15 09:55:35:610 2019 WX2560H RADIUS/7/EVENT: Processing AAA request data. *Feb 15 09:55:39:465 2019 WX2560H RADIUS/7/EVENT: Response timed out. *Feb 15 09:55:39:465 2019 WX2560H RADIUS/7/EVENT: Found request context, dstIP: 192.168.20.2; dstPort: 1812; VPN instance: --(public); socketfd: 149; pktID:90. *Feb 15 09:55:39:466 2019 WX2560H RADIUS/7/EVENT: Retransmitting request packet, currentTries: 2, maxTries: 3. *Feb 15 09:55:42:465 2019 WX2560H RADIUS/7/EVENT: Response timed out. *Feb 15 09:55:42:465 2019 WX2560H RADIUS/7/EVENT: Found request context, dstIP: 192.168.20.2; dstPort: 1812; VPN instance: --(public); socketfd: 149; pktID:90. *Feb 15 09:55:42:466 2019 WX2560H RADIUS/7/EVENT: Retransmitting request packet, currentTries: 3, maxTries: 3. *Feb 15 09:55:45:466 2019 WX2560H RADIUS/7/EVENT: Response timed out. *Feb 15 09:55:45:466 2019 WX2560H RADIUS/7/EVENT: Found request context, dstIP: 192.168.20.2; dstPort: 1812; VPN instance: --(public); socketfd: 149; pktID:90. *Feb 15 09:55:45:467 2019 WX2560H RADIUS/7/EVENT: Reached the maximum retries. *Feb 15 09:55:45:467 2019 WX2560H RADIUS/7/EVENT: Set status of server to block successfully. serverIP: 192.168.20.2, serverPort: 1812. *Feb 15 09:55:45:467 2019 WX2560H RADIUS/7/EVENT: Got next server failed. *Feb 15 09:55:45:467 2019 WX2560H RADIUS/7/EVENT: Sent reply error message to PAM. *Feb 15 09:55:45:467 2019 WX2560H RADIUS/7/EVENT: Sent reply message successfully. %Feb 15 09:55:45:468 2019 WX2560H DOT1X/5/DOT1X_WLAN_LOGIN_FAILURE: -Username=CORP\it01-UserMAC=c83d-d4f0-7999-BSSID=38ad-be58-d6a0-SSID=service1-VLANID=1; A user failed 802.1X authentication. *Feb 15 09:55:45:468 2019 WX2560H RADIUS/7/EVENT: PAM_RADIUS: Processing RADIUS authentication. *Feb 15 09:55:45:468 2019 WX2560H RADIUS/7/EVENT: PAM_RADIUS: Fetched authentication reply-data successfully, resultCode: 3 *Feb 15 09:55:45:469 2019 WX2560H RADIUS/7/EVENT: Received status of server changing event. 

拓扑如下

windows NPS Radius配置截图如下：