WX3510H结合绿洲平台做短信认证,手机端认证正常,电脑端连接无线网无法弹出短信认证页面,手动在浏览器输入ip地址1.1.1.1可以弹出短信认证页面。电脑连接无线网能够正常解析oasis.h3c.com。
(0)
最佳答案
您好
放通一下dns测试
#放通去往dns的流量。
[H3C]portal free-rule 1 destination ip any udp 53
[H3C]portal free-rule 2 destination ip any
tcp 53
(0)
这个有了
<WX3510_H>dis <WX3510_H>display cur <WX3510_H>display current-configuration # version 7.1.064, Release 5272 # sysname WX3510_H # telnet server enable # irf mac-address persistent timer irf auto-update enable irf auto-merge enable irf member 1 priority 1 # dhcp enable # dns server 60.171.135.1 dns server 202.102.213.68 # password-recovery enable # vlan 1 # vlan 127 # vlan 140 to 143 # vlan 1000 # irf-port 1 # dhcp server ip-pool AP-ZhuChe gateway-list 192.168.140.254 network 192.168.140.0 mask 255.255.255.0 # dhcp server ip-pool JCBank-Guest gateway-list 172.17.255.254 network 172.17.0.0 mask 255.255.0.0 dns-list 202.102.213.68 61.132.163.68 expired day 0 hour 2 # dhcp server ip-pool JCBank-OA gateway-list 172.16.255.254 network 172.16.0.0 mask 255.255.0.0 dns-list 202.102.213.68 61.132.163.68 # wlan service-template 1 ssid JCBank_OA-2.4G vlan 141 service-template enable # wlan service-template 2 ssid JCBank_Guest-2.4 vlan 142 portal enable method direct portal domain cloud portal apply web-server 2 portal temp-pass period 20 enable service-template enable # wlan service-template 4 ssid JCBank_OA-5G vlan 141 service-template enable # wlan service-template 5 ssid JCBank_Guest-5G vlan 142 portal enable method direct portal domain cloud portal apply web-server 5 portal temp-pass period 20 enable service-template enable # interface Bridge-Aggregation1 port link-type trunk port trunk permit vlan 1 127 1000 # interface NULL0 # interface Vlan-interface127 ip address 192.168.127.10 255.255.255.0 # interface Vlan-interface140 description ==AP-ZhuChe== ip address 192.168.140.254 255.255.255.0 # interface Vlan-interface141 description ==AP-OA== ip address 172.16.255.254 255.255.0.0 # interface Vlan-interface142 description ==AP-Guest== ip address 172.17.255.254 255.255.0.0 # interface Vlan-interface1000 description ==TO-S7503E_IRF== ip address 10.0.0.6 255.255.255.252 # interface GigabitEthernet1/0/1 port link-type trunk port trunk permit vlan 1 127 140 to 142 # interface GigabitEthernet1/0/2 port link-type trunk port trunk permit vlan 1 127 140 to 142 # interface GigabitEthernet1/0/3 # interface GigabitEthernet1/0/4 # interface GigabitEthernet1/0/5 # interface GigabitEthernet1/0/6 # interface GigabitEthernet1/0/7 port link-type trunk port trunk permit vlan 1 127 1000 port link-aggregation group 1 # interface GigabitEthernet1/0/8 port link-type trunk port trunk permit vlan 1 127 1000 port link-aggregation group 1 # scheduler logfile size 16 # line class console user-role network-admin # line class vty user-role network-operator # line con 0 user-role network-admin # line vty 0 31 user-role level-15 user-role network-operator set authentication password hash $h$6$/zMv+SIN7bBkiQ1s$+OuUfozG2x61oYV9jGk0fgkqv1a8RTqXc69QLW2pmtXyJX6u5iLjEwbbUls1/zFHsKZ5H3O1vF6MPABufHL17w== # ip route-static 0.0.0.0 0 10.0.0.5 # undo info-center logfile enable # snmp-agent snmp-agent local-engineid 800063A2804077A9FE94A000000001 snmp-agent community read yige-pub snmp-agent community write yigenet-pri snmp-agent sys-info version all snmp-agent target-host trap address udp-domain 192.168.150.1 params securityname yige-pub v2c snmp-agent target-host trap address udp-domain 192.168.150.2 params securityname yige-pub v2c snmp-agent trap enable arp snmp-agent trap enable radius snmp-agent trap enable syslog # ntp-service enable ntp-service unicast-server 10.0.0.5 # domain cloud authorization-attribute idle-cut 30 10240 authorization-attribute session-timeout 360 authentication portal none authorization portal none accounting portal none # domain system # domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user admin class manage password hash $h$6$qlXuN6OoGFeZEINe$SVHxFmIm/7cD1EmLavWoJeC4WmjZ2JwETAbPxtMUJ3Z1Q9hCIDWt8rIDQC9ty2AWEI7wgmt0mnCV82hkWgvq9A== service-type telnet http https authorization-attribute user-role network-admin # local-user yige class manage password hash $h$6$6hMET3i65cqqcujU$4GBeQW9HzKz5Ubuw3XWmETOyJkvOKAG2Ac668qAnkakSUExoc+EwdMIXEdHXLTcF+k1/pbYW/E5H2RAakUl4sw== service-type ftp authorization-attribute user-role network-admin authorization-attribute user-role network-operator # ftp server enable # portal host-check enable portal user log enable portal free-rule 2346257224 destination open.weixin.qq.com portal free-rule 2346257225 destination ip any tcp 5223 portal free-rule 2346257226 destination ip 114.114.114.114 255.255.255.255 portal free-rule 2346257227 destination ip any udp 53 portal free-rule 2346257228 destination ip any tcp 53 portal free-rule 2346257229 destination oasisauth.h3c.com portal free-rule 2346257230 destination short.weixin.qq.com portal free-rule 2346257231 destination mp.weixin.qq.com portal free-rule 2346257232 destination long.weixin.qq.com portal free-rule 2346257233 destination dns.weixin.qq.com portal free-rule 2346257234 destination minorshort.weixin.qq.com portal free-rule 2346257235 destination extshort.weixin.qq.com portal free-rule 2346257236 destination szshort.weixin.qq.com portal free-rule 2346257237 destination szlong.weixin.qq.com portal free-rule 2346257238 destination szextshort.weixin.qq.com portal free-rule 2346257239 destination isdspeed.qq.com portal free-rule 2346257240 destination ***.*** portal free-rule 2346257241 destination long.open.weixin.qq.com portal free-rule 2346257242 destination res.wx.qq.com portal free-rule 2346257243 destination wifi.weixin.qq.com portal free-rule 2346587222 destination ip 202.102.213.68 255.255.255.255 portal free-rule 2346587223 destination ip 61.132.163.62 255.255.255.255 portal safe-redirect enable portal safe-redirect method get post portal safe-redirect user-agent Android portal safe-redirect user-agent CFNetwork portal safe-redirect user-agent CaptiveNetworkSupport portal safe-redirect user-agent Chrome portal safe-redirect user-agent Firefox portal safe-redirect user-agent MSIE10.0 portal safe-redirect user-agent MSIE6.0 portal safe-redirect user-agent MSIE7.0 portal safe-redirect user-agent MSIE8.0 portal safe-redirect user-agent MSIE9.0 portal safe-redirect user-agent Metasr portal safe-redirect user-agent MicroMessenger portal safe-redirect user-agent Mozilla portal safe-redirect user-agent UC portal safe-redirect user-agent WeChat portal safe-redirect user-agent iPhone portal safe-redirect user-agent micromessenger # portal web-server 2 url http://oasisauth.h3c.com/portal/protocol server-type oauth if-match user-agent CaptiveNetworkSupport redirect-url http://oasisauth.h3c.com/generate_404 if-match user-agent Dalvik/2.1.0(Linux;U;Android7.0;HUAWEI redirect-url http://oasisauth.h3c.com/generate_404 if-match original-url http://10.168.168.168 temp-pass if-match original-url http://captive.apple.com user-agent Mozilla temp-pass redirect-url http://oasisauth.h3c.com/portal/protocol if-match original-url ***.***/wifi/echo temp-pass redirect-url http://oasisauth.h3c.com/generate_404 if-match original-url http://www.apple.com user-agent Mozilla temp-pass redirect-url http://oasisauth.h3c.com/portal/protocol # portal web-server 5 url http://oasisauth.h3c.com/portal/protocol server-type oauth if-match user-agent CaptiveNetworkSupport redirect-url http://oasisauth.h3c.com/generate_404 if-match user-agent Dalvik/2.1.0(Linux;U;Android7.0;HUAWEI redirect-url http://oasisauth.h3c.com/generate_404 if-match original-url http://10.168.168.168 temp-pass if-match original-url http://captive.apple.com user-agent Mozilla temp-pass redirect-url http://oasisauth.h3c.com/portal/protocol if-match original-url ***.***/wifi/echo temp-pass redirect-url http://oasisauth.h3c.com/generate_404 if-match original-url http://www.apple.com user-agent Mozilla temp-pass redirect-url http://oasisauth.h3c.com/portal/protocol # portal local-web-server http # portal local-web-server https # ip http enable ip https enable # portal mac-trigger-server cloud binding-retry 2 interval 3 cloud-binding enable # wlan global-configuration nas-id cm-0-1296803-210235A1JNB19A000070 # wlan ap-group default-group vlan 1 # user-isolation vlan 141 enable user-isolation vlan 141 permit-mac 4077-a9fe-94a0 user-isolation vlan 142 enable user-isolation vlan 142 permit-mac 4077-a9fe-94a0 # wlan ap ap1 model WA5320-SI serial-id 219801A1B3819AE0098M vlan 1 radio 1 channel 149 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 1 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap2 model WA5320-SI serial-id 219801A1B3819AE0094W vlan 1 radio 1 channel 157 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 6 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap3 model WA5320-SI serial-id 219801A1B3819AE00B69 vlan 1 radio 1 channel 165 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 11 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap4 model WA5320-SI serial-id 219801A1B3819AE00B6M vlan 1 hybrid-remote-ap enable radio 1 channel 149 max-power 20 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 11 max-power 20 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap5 model WA5320-SI serial-id 219801A1B3819AE00B68 vlan 1 radio 1 channel 149 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 1 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap6 model WA5320-SI serial-id 219801A1B3819AE00B5H vlan 1 radio 1 channel 157 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 6 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap7 model WA5320-SI serial-id 219801A1B3819AE008ZM vlan 1 radio 1 channel 149 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 1 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap8 model WA5320-SI serial-id 219801A1B3819AE00B4L vlan 1 radio 1 channel 157 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 6 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap9 model WA5320-SI serial-id 219801A1B3819AE00B43 vlan 1 radio 1 channel 165 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 11 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap10 model WA5320-SI serial-id 219801A1B3819AE0090S vlan 1 radio 1 channel 149 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 1 max-power 20 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap11 model WA5320-SI serial-id 219801A1B3819AE00B2C vlan 1 hybrid-remote-ap enable radio 1 channel 165 max-power 20 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 11 max-power 15 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap12 model WA5320-SI serial-id 219801A1B3819AE00B4D vlan 1 hybrid-remote-ap enable radio 1 channel 149 max-power 15 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 1 max-power 15 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap13 model WA5320-SI serial-id 219801A1B3819AE00B4C vlan 1 radio 1 channel 157 max-power 20 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 6 max-power 15 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap14 model WA5320-SI serial-id 219801A1B3819AE0090T vlan 1 radio 1 channel 165 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 11 max-power 20 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap15 model WA5320-SI serial-id 219801A1B3819AE00B4S vlan 1 radio 1 channel 149 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 1 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap16 model WA5320-SI serial-id 219801A1B3819AE00B2M vlan 1 radio 1 channel 157 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 6 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap17 model WA5320-SI serial-id 219801A1B3819AE00B44 vlan 1 radio 1 channel 165 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 11 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap18 model WA5320-SI serial-id 219801A1B3819AE0092J vlan 1 radio 1 channel 149 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 1 max-power 20 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap19 model WA5320-SI serial-id 219801A1B3819AE00B42 vlan 1 hybrid-remote-ap enable radio 1 channel 165 max-power 20 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 11 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap20 model WA5320-SI serial-id 219801A1B3819AE0091Y vlan 1 hybrid-remote-ap enable radio 1 channel 149 max-power 20 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 1 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap21 model WA5320-SI serial-id 219801A1B3819AE009ZS vlan 1 radio 1 channel 157 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 6 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap22 model WA5320-SI serial-id 219801A1B3819AE008Z0 vlan 1 radio 1 channel 165 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 11 max-power 20 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap23 model WA5320-SI serial-id 219801A1B3819AE009B5 vlan 1 radio 1 channel 149 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 1 max-power 15 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap24 model WA5320-SI serial-id 219801A1B3819AE0091K vlan 1 radio 1 channel 157 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 6 max-power 15 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap25 model WA5320-SI serial-id 219801A1B3819AE00B19 vlan 1 radio 1 channel 165 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 11 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # wlan ap ap26 model WA5320-SI serial-id 219801A1B3819AE00B47 vlan 1 radio 1 channel 149 radio enable option client reject enable rssi 15 service-template 4 service-template 5 radio 2 channel 1 max-power 10 radio enable option client reject enable rssi 15 service-template 1 service-template 2 gigabitethernet 1 # cmtunnel server domain oasisdev.h3c.com # cloud-management server domain oasis.h3c.com # return
portal free-rule 2346587222 destination ip 202.102.213.68 255.255.255.255 portal free-rule 2346587223 destination ip 61.132.163.62 255.255.255.255 portal free-rule 2346257227 destination ip any udp 53 portal free-rule 2346257228 destination ip any tcp 53
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
DNS解析问题怎么排查