• 全部
  • 经验案例
  • 典型配置
  • 技术公告
  • FAQ
  • 漏洞说明
  • 全部
  • 全部
  • 大数据引擎
  • 知了引擎
产品线
搜索
取消
案例类型
发布者
是否解决
是否官方
时间
搜索引擎
匹配模式
高级搜索

绿洲无线短信认证

2020-09-28提问
  • 0关注
  • 1收藏,1084浏览
zz_Y 一段
粉丝:1人 关注:9人

问题描述:

WX3510H结合绿洲平台做短信认证,手机端认证正常,电脑端连接无线网无法弹出短信认证页面,手动在浏览器输入ip地址1.1.1.1可以弹出短信认证页面。电脑连接无线网能够正常解析oasis.h3c.com。

组网及组网描述:


最佳答案

粉丝:30人 关注:0人

您好

放通一下dns测试

#放通去往dns的流量。


[H3C]portal free-rule 1 destination ip any udp 53


[H3C]portal free-rule 2 destination ip any tcp 53

这个有了

zz_Y 发表时间:2020-09-28
回复zz_Y:

有配置能看吗

zhang同学 发表时间:2020-09-28

<WX3510_H>dis <WX3510_H>display cur <WX3510_H>display current-configuration # version 7.1.064, Release 5272 # sysname WX3510_H # telnet server enable # irf mac-address persistent timer irf auto-update enable irf auto-merge enable irf member 1 priority 1 # dhcp enable # dns server 60.171.135.1 dns server 202.102.213.68 # password-recovery enable # vlan 1 # vlan 127 # vlan 140 to 143 # vlan 1000 # irf-port 1 # dhcp server ip-pool AP-ZhuChe gateway-list 192.168.140.254 network 192.168.140.0 mask 255.255.255.0 # dhcp server ip-pool JCBank-Guest gateway-list 172.17.255.254 network 172.17.0.0 mask 255.255.0.0 dns-list 202.102.213.68 61.132.163.68 expired day 0 hour 2 # dhcp server ip-pool JCBank-OA gateway-list 172.16.255.254 network 172.16.0.0 mask 255.255.0.0 dns-list 202.102.213.68 61.132.163.68 # wlan service-template 1 ssid JCBank_OA-2.4G vlan 141 service-template enable # wlan service-template 2 ssid JCBank_Guest-2.4 vlan 142 portal enable method direct portal domain cloud portal apply web-server 2 portal temp-pass period 20 enable service-template enable # wlan service-template 4 ssid JCBank_OA-5G vlan 141 service-template enable # wlan service-template 5 ssid JCBank_Guest-5G vlan 142 portal enable method direct portal domain cloud portal apply web-server 5 portal temp-pass period 20 enable service-template enable # interface Bridge-Aggregation1 port link-type trunk port trunk permit vlan 1 127 1000 # interface NULL0 # interface Vlan-interface127 ip address 192.168.127.10 255.255.255.0 # interface Vlan-interface140 description ==AP-ZhuChe== ip address 192.168.140.254 255.255.255.0 # interface Vlan-interface141 description ==AP-OA== ip address 172.16.255.254 255.255.0.0 # interface Vlan-interface142 description ==AP-Guest== ip address 172.17.255.254 255.255.0.0 # interface Vlan-interface1000 description ==TO-S7503E_IRF== ip address 10.0.0.6 255.255.255.252 # interface GigabitEthernet1/0/1 port link-type trunk port trunk permit vlan 1 127 140 to 142 # interface GigabitEthernet1/0/2 port link-type trunk port trunk permit vlan 1 127 140 to 142 # interface GigabitEthernet1/0/3 # interface GigabitEthernet1/0/4 # interface GigabitEthernet1/0/5 # interface GigabitEthernet1/0/6 # interface GigabitEthernet1/0/7 port link-type trunk port trunk permit vlan 1 127 1000 port link-aggregation group 1 # interface GigabitEthernet1/0/8 port link-type trunk port trunk permit vlan 1 127 1000 port link-aggregation group 1 # scheduler logfile size 16 # line class console user-role network-admin # line class vty user-role network-operator # line con 0 user-role network-admin # line vty 0 31 user-role level-15 user-role network-operator set authentication password hash $h$6$/zMv+SIN7bBkiQ1s$+OuUfozG2x61oYV9jGk0fgkqv1a8RTqXc69QLW2pmtXyJX6u5iLjEwbbUls1/zFHsKZ5H3O1vF6MPABufHL17w== # ip route-static 0.0.0.0 0 10.0.0.5 # undo info-center logfile enable # snmp-agent snmp-agent local-engineid 800063A2804077A9FE94A000000001 snmp-agent community read yige-pub snmp-agent community write yigenet-pri snmp-agent sys-info version all snmp-agent target-host trap address udp-domain 192.168.150.1 params securityname yige-pub v2c snmp-agent target-host trap address udp-domain 192.168.150.2 params securityname yige-pub v2c snmp-agent trap enable arp snmp-agent trap enable radius snmp-agent trap enable syslog # ntp-service enable ntp-service unicast-server 10.0.0.5 # domain cloud authorization-attribute idle-cut 30 10240 authorization-attribute session-timeout 360 authentication portal none authorization portal none accounting portal none # domain system # domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user admin class manage password hash $h$6$qlXuN6OoGFeZEINe$SVHxFmIm/7cD1EmLavWoJeC4WmjZ2JwETAbPxtMUJ3Z1Q9hCIDWt8rIDQC9ty2AWEI7wgmt0mnCV82hkWgvq9A== service-type telnet http https authorization-attribute user-role network-admin # local-user yige class manage password hash $h$6$6hMET3i65cqqcujU$4GBeQW9HzKz5Ubuw3XWmETOyJkvOKAG2Ac668qAnkakSUExoc+EwdMIXEdHXLTcF+k1/pbYW/E5H2RAakUl4sw== service-type ftp authorization-attribute user-role network-admin authorization-attribute user-role network-operator # ftp server enable # portal host-check enable portal user log enable portal free-rule 2346257224 destination open.weixin.qq.com portal free-rule 2346257225 destination ip any tcp 5223 portal free-rule 2346257226 destination ip 114.114.114.114 255.255.255.255 portal free-rule 2346257227 destination ip any udp 53 portal free-rule 2346257228 destination ip any tcp 53 portal free-rule 2346257229 destination oasisauth.h3c.com portal free-rule 2346257230 destination short.weixin.qq.com portal free-rule 2346257231 destination mp.weixin.qq.com portal free-rule 2346257232 destination long.weixin.qq.com portal free-rule 2346257233 destination dns.weixin.qq.com portal free-rule 2346257234 destination minorshort.weixin.qq.com portal free-rule 2346257235 destination extshort.weixin.qq.com portal free-rule 2346257236 destination szshort.weixin.qq.com portal free-rule 2346257237 destination szlong.weixin.qq.com portal free-rule 2346257238 destination szextshort.weixin.qq.com portal free-rule 2346257239 destination isdspeed.qq.com portal free-rule 2346257240 destination ***.*** portal free-rule 2346257241 destination long.open.weixin.qq.com portal free-rule 2346257242 destination res.wx.qq.com portal free-rule 2346257243 destination wifi.weixin.qq.com portal free-rule 2346587222 destination ip 202.102.213.68 255.255.255.255 portal free-rule 2346587223 destination ip 61.132.163.62 255.255.255.255 portal safe-redirect enable portal safe-redirect method get post portal safe-redirect user-agent Android portal safe-redirect user-agent CFNetwork portal safe-redirect user-agent CaptiveNetworkSupport portal safe-redirect user-agent Chrome portal safe-redirect user-agent Firefox portal safe-redirect user-agent MSIE10.0 portal safe-redirect user-agent MSIE6.0 portal safe-redirect user-agent MSIE7.0 portal safe-redirect user-agent MSIE8.0 portal safe-redirect user-agent MSIE9.0 portal safe-redirect user-agent Metasr portal safe-redirect user-agent MicroMessenger portal safe-redirect user-agent Mozilla portal safe-redirect user-agent UC portal safe-redirect user-agent WeChat portal safe-redirect user-agent iPhone portal safe-redirect user-agent micromessenger # portal web-server 2 url http://oasisauth.h3c.com/portal/protocol server-type oauth if-match user-agent CaptiveNetworkSupport redirect-url http://oasisauth.h3c.com/generate_404 if-match user-agent Dalvik/2.1.0(Linux;U;Android7.0;HUAWEI redirect-url http://oasisauth.h3c.com/generate_404 if-match original-url http://10.168.168.168 temp-pass if-match original-url http://captive.apple.com user-agent Mozilla temp-pass redirect-url http://oasisauth.h3c.com/portal/protocol if-match original-url ***.***/wifi/echo temp-pass redirect-url http://oasisauth.h3c.com/generate_404 if-match original-url http://www.apple.com user-agent Mozilla temp-pass redirect-url http://oasisauth.h3c.com/portal/protocol # portal web-server 5 url http://oasisauth.h3c.com/portal/protocol server-type oauth if-match user-agent CaptiveNetworkSupport redirect-url http://oasisauth.h3c.com/generate_404 if-match user-agent Dalvik/2.1.0(Linux;U;Android7.0;HUAWEI redirect-url http://oasisauth.h3c.com/generate_404 if-match original-url http://10.168.168.168 temp-pass if-match original-url http://captive.apple.com user-agent Mozilla temp-pass redirect-url http://oasisauth.h3c.com/portal/protocol if-match original-url ***.***/wifi/echo temp-pass redirect-url http://oasisauth.h3c.com/generate_404 if-match original-url http://www.apple.com user-agent Mozilla temp-pass redirect-url http://oasisauth.h3c.com/portal/protocol # portal local-web-server http # portal local-web-server https # ip http enable ip https enable # portal mac-trigger-server cloud binding-retry 2 interval 3 cloud-binding enable # wlan global-configuration nas-id cm-0-1296803-210235A1JNB19A000070 # wlan ap-group default-group vlan 1 # user-isolation vlan 141 enable user-isolation vlan 141 permit-mac 4077-a9fe-94a0 user-isolation vlan 142 enable user-isolation vlan 142 permit-mac 4077-a9fe-94a0 # wlan ap ap1 model WA5320-SI serial-id 219801A1B3819AE0098M vlan 1 radio 1 channel 149 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 1 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap2 model WA5320-SI serial-id 219801A1B3819AE0094W vlan 1 radio 1 channel 157 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 6 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap3 model WA5320-SI serial-id 219801A1B3819AE00B69 vlan 1 radio 1 channel 165 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 11 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap4 model WA5320-SI serial-id 219801A1B3819AE00B6M vlan 1 hybrid-remote-ap enable radio 1 channel 149 max-power 20 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 11 max-power 20 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap5 model WA5320-SI serial-id 219801A1B3819AE00B68 vlan 1 radio 1 channel 149 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 1 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap6 model WA5320-SI serial-id 219801A1B3819AE00B5H vlan 1 radio 1 channel 157 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 6 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap7 model WA5320-SI serial-id 219801A1B3819AE008ZM vlan 1 radio 1 channel 149 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 1 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap8 model WA5320-SI serial-id 219801A1B3819AE00B4L vlan 1 radio 1 channel 157 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 6 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap9 model WA5320-SI serial-id 219801A1B3819AE00B43 vlan 1 radio 1 channel 165 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 11 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap10 model WA5320-SI serial-id 219801A1B3819AE0090S vlan 1 radio 1 channel 149 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 1 max-power 20 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap11 model WA5320-SI serial-id 219801A1B3819AE00B2C vlan 1 hybrid-remote-ap enable radio 1 channel 165 max-power 20 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 11 max-power 15 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap12 model WA5320-SI serial-id 219801A1B3819AE00B4D vlan 1 hybrid-remote-ap enable radio 1 channel 149 max-power 15 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 1 max-power 15 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap13 model WA5320-SI serial-id 219801A1B3819AE00B4C vlan 1 radio 1 channel 157 max-power 20 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 6 max-power 15 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap14 model WA5320-SI serial-id 219801A1B3819AE0090T vlan 1 radio 1 channel 165 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 11 max-power 20 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap15 model WA5320-SI serial-id 219801A1B3819AE00B4S vlan 1 radio 1 channel 149 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 1 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap16 model WA5320-SI serial-id 219801A1B3819AE00B2M vlan 1 radio 1 channel 157 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 6 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap17 model WA5320-SI serial-id 219801A1B3819AE00B44 vlan 1 radio 1 channel 165 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 11 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap18 model WA5320-SI serial-id 219801A1B3819AE0092J vlan 1 radio 1 channel 149 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 1 max-power 20 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap19 model WA5320-SI serial-id 219801A1B3819AE00B42 vlan 1 hybrid-remote-ap enable radio 1 channel 165 max-power 20 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 11 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap20 model WA5320-SI serial-id 219801A1B3819AE0091Y vlan 1 hybrid-remote-ap enable radio 1 channel 149 max-power 20 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 1 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap21 model WA5320-SI serial-id 219801A1B3819AE009ZS vlan 1 radio 1 channel 157 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 6 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap22 model WA5320-SI serial-id 219801A1B3819AE008Z0 vlan 1 radio 1 channel 165 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 11 max-power 20 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap23 model WA5320-SI serial-id 219801A1B3819AE009B5 vlan 1 radio 1 channel 149 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 1 max-power 15 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap24 model WA5320-SI serial-id 219801A1B3819AE0091K vlan 1 radio 1 channel 157 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 6 max-power 15 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap25 model WA5320-SI serial-id 219801A1B3819AE00B19 vlan 1 radio 1 channel 165 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 11 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap26 model WA5320-SI serial-id 219801A1B3819AE00B47 vlan 1 radio 1 channel 149 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 1 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # cmtunnel server domain oasisdev.h3c.com # cloud-management server domain oasis.h3c.com # return

zz_Y 发表时间:2020-09-28
回复zz_Y:

没看到有配置放通dns之类的配置啊

zhang同学 发表时间:2020-09-28

portal free-rule 2346587222 destination ip 202.102.213.68 255.255.255.255 portal free-rule 2346587223 destination ip 61.132.163.62 255.255.255.255 portal free-rule 2346257227 destination ip any udp 53 portal free-rule 2346257228 destination ip any tcp 53

zz_Y 发表时间:2020-09-28
回复zz_Y:

那就看一下是不是dns解析有问题,看一下是不是输入任意ip都可以弹出页面

zhang同学 发表时间:2020-09-28
回复zhang同学:

只试了1.1.1.1可以

zz_Y 发表时间:2020-09-28
回复zhang同学:

DNS解析问题怎么排查

zz_Y 发表时间:2020-09-28
0 个回答

该问题暂时没有网友解答

编辑答案

你正在编辑答案

如果你要对问题或其他回答进行点评或询问,请使用评论功能。

分享扩散:

提出建议

    +

亲~登录后才可以操作哦!

确定

亲~检测到您登陆的账号未在http://hclhub.h3c.com进行注册

注册后可访问此模块

跳转hclhub

你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作

举报

×

侵犯我的权益 >
对根叔社区有害的内容 >
辱骂、歧视、挑衅等(不友善)

侵犯我的权益

×

泄露了我的隐私 >
侵犯了我企业的权益 >
抄袭了我的内容 >
诽谤我 >
辱骂、歧视、挑衅等(不友善)
骚扰我

泄露了我的隐私

×

您好,当您发现根叔知了上有泄漏您隐私的内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到zhiliao@h3c.com 邮箱,我们会尽快处理。
  • 1. 您认为哪些内容泄露了您的隐私?(请在邮件中列出您举报的内容、链接地址,并给出简短的说明)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)

侵犯了我企业的权益

×

您好,当您发现根叔知了上有关于您企业的造谣与诽谤、商业侵权等内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到 zhiliao@h3c.com 邮箱,我们会在审核后尽快给您答复。
  • 1. 您举报的内容是什么?(请在邮件中列出您举报的内容和链接地址)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)
  • 3. 是哪家企业?(营业执照,单位登记证明等证件)
  • 4. 您与该企业的关系是?(您是企业法人或被授权人,需提供企业委托授权书)
我们认为知名企业应该坦然接受公众讨论,对于答案中不准确的部分,我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

抄袭了我的内容

×

原文链接或出处

诽谤我

×

您好,当您发现根叔知了上有诽谤您的内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到zhiliao@h3c.com 邮箱,我们会尽快处理。
  • 1. 您举报的内容以及侵犯了您什么权益?(请在邮件中列出您举报的内容、链接地址,并给出简短的说明)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)
我们认为知名企业应该坦然接受公众讨论,对于答案中不准确的部分,我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

对根叔社区有害的内容

×

垃圾广告信息
色情、暴力、血腥等违反法律法规的内容
政治敏感
不规范转载 >
辱骂、歧视、挑衅等(不友善)
骚扰我
诱导投票

不规范转载

×

举报说明