s5130做portal认证

s5130跟aaa服务器portal对接，重定向页面打不开，但手动输入认证页面能打开，只是认证失败
能不能帮我看看，这配置有没有问题
<H3C>display current-configuration # version 7.1.045, Release 3116# sysname H3C# irf mac-address persistent timer irf auto-update enable undo irf link-delay irf member 1 priority 1# lldp global enable# password-recovery enable#vlan 1#vlan 10#vlan 19 to 20#vlan 30# stp global enable#              interface NULL0#interface Vlan-interface10 ip address 192.168.2.111 255.255.255.0 portal enable method direct portal bas-ip 192.168.2.111 portal apply web-server h3c#interface GigabitEthernet1/0/1 port access vlan 10#interface GigabitEthernet1/0/2 port access vlan 10#interface GigabitEthernet1/0/3 port access vlan 10#interface GigabitEthernet1/0/4 port access vlan 10#interface GigabitEthernet1/0/5#interface GigabitEthernet1/0/6#interface GigabitEthernet1/0/7#interface GigabitEthernet1/0/8#interface GigabitEthernet1/0/9#interface GigabitEthernet1/0/10#interface GigabitEthernet1/0/11#interface GigabitEthernet1/0/12#interface GigabitEthernet1/0/13#interface GigabitEthernet1/0/14#interface GigabitEthernet1/0/15#interface GigabitEthernet1/0/16#interface GigabitEthernet1/0/17#interface GigabitEthernet1/0/18#interface GigabitEthernet1/0/19#interface GigabitEthernet1/0/20#interface GigabitEthernet1/0/21#interface GigabitEthernet1/0/22#interface GigabitEthernet1/0/23#interface GigabitEthernet1/0/24#interface GigabitEthernet1/0/25#interface GigabitEthernet1/0/26#interface GigabitEthernet1/0/27#interface GigabitEthernet1/0/28#interface GigabitEthernet1/0/29#interface GigabitEthernet1/0/30#interface GigabitEthernet1/0/31#interface GigabitEthernet1/0/32#interface GigabitEthernet1/0/33#interface GigabitEthernet1/0/34#interface GigabitEthernet1/0/35#interface GigabitEthernet1/0/36#interface GigabitEthernet1/0/37#interface GigabitEthernet1/0/38#interface GigabitEthernet1/0/39#interface GigabitEthernet1/0/40#interface GigabitEthernet1/0/41#interface GigabitEthernet1/0/42#interface GigabitEthernet1/0/43#interface GigabitEthernet1/0/44#interface GigabitEthernet1/0/45#interface GigabitEthernet1/0/46#interface GigabitEthernet1/0/47 port link-type trunk port trunk permit vlan 1 10 20 30 #interface GigabitEthernet1/0/48#interface Ten-GigabitEthernet1/0/49#interface Ten-GigabitEthernet1/0/50#interface Ten-GigabitEthernet1/0/51#interface Ten-GigabitEthernet1/0/52# scheduler logfile size 16
#line class aux user-role network-admin
#line class vty user-role network-operator
#line aux 0 user-role network-admin
#line vty 0 63 user-role network-operator
# ip route-static 0.0.0.0 0 192.168.2.1
# snmp-agent snmp-agent local-engineid 800063A280782C291057E700000001
snmp-agent sys-info version v3 
snmp-agent group v3 cloud_campus privacy read-view cloud_campus write-view cloud_campus notify-view cloud_campus_view snmp-agent target-host trap address udp-domain 192.168.1.100 params securityname user001 v3 privacy snmp-agent mib-view included cloud_campus-view iso  snmp-agent usm-user v3 user001 cloud_campus cipher authentication-mode sha $c$3$ClVWcMMb4ZyonyA9 0Cc4jpnAIHT2JhEiH wMapQqk5zJEjwMls= privacy-mode aes128 $c$3$sGfOTdBKZ3YTgdFiEV3IdzWwcDWV3ur51PnPmFkKLWeI w== snmp-agent trap enable arp  snmp-agent trap enable radius  snmp-agent trap enable stp # radius session-control enable
#radius scheme h3c primary authentication 192.168.1.100 primary accounting 192.168.1.100 key authentication cipher $c$3$WJxc/jj1M3Uaay9Q/09Xa w0OPzhMuAjZhCNkwg= key accounting cipher $c$3$DQHefVpQbaLKnyO UFGfVfOzS/ktqDKB4vkthgg= user-name-format without-domain
#radius scheme system user-name-format without-domain
#domain h3c authentication portal radius-scheme h3c authorization portal radius-scheme h3c accounting portal radius-scheme h3c
#domain system# domain default enable h3c
#role name level-0 description Predefined level-0 role
#role name level-1 description Predefined level-1 role
#role name level-2 description Predefined level-2 role
#role name level-3 description Predefined level-3 role
#role name level-4 description Predefined level-4 role
#role name level-5 description Predefined level-5 role
#role name level-6 description Predefined level-6 role
#role name level-7 description Predefined level-7 role
#role name level-8 description Predefined level-8 role
#role name level-9 description Predefined level-9 role
#role name level-10 description Predefined level-10 role
#role name level-11 description Predefined level-11 role
#role name level-12 description Predefined level-12 role
#role name level-13 description Predefined level-13 role
#role name level-14 description Predefined level-14 role
#user-group system
# portal free-rule 1 source ip any destination ip 192.168.1.100 255.255.255.255 portal free-rule 2 source ip 192.168.1.100 255.255.255.255 portal free-rule 3 source ip any destination ip 192.168.2.1 255.255.255.255 portal free-rule 4 source ip 192.168.2.1 255.255.255.255
#portal web-server h3c url https://192.168.1.100:19008/portal url-parameter redirect-url original-url url-parameter userip source-address url-parameter userurl value https://192.168.1.100:19008/portal
#portal server h3c ip 192.168.1.100 key cipher $c$3$k8iBMNTTegbeF3tkLrcC3CxFtEupa7FbYdmhl9I=
#return<H3C>             quit

s5130做接入，上联一台汇聚起网关，再到aaa服务器