v7控制器+本地转发+portal认证如何配置

网络结构如图，总部核心与分布核心三层互联，AP想采用本地转发，无线用户采用portal认证，V7版本的谁有开局或者模板，在网站上找了个V5版本的但是好多地方感觉看不懂。

下面是网站V5的开局

·        

      LSW

#

vlan 10

#

vlan 20

#

vlan 30

#

vlan 138

#

interface Bridge-Aggregation4

 port link-type trunk

 port trunk permit vlan all

#

interface Vlan-interface10

 ip address 138.10.1.1 255.255.0.0

#

interface Vlan-interface20

 ip address 138.20.1.1 255.255.0.0

#

interface Vlan-interface30

 ip address 138.30.1.1 255.255.0.0

#

interface Vlan-interface138

 ip address 8.138.1.2 255.255.0.0

#

interface Ten-GigabitEthernet4/0/1

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan all

 port link-aggregation group 4

#

interface Ten-GigabitEthernet4/0/2

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan all

 port link-aggregation group 4

#

 ip route-static 8.0.0.0 255.0.0.0 8.138.1.1

#

·              AC

#

 portal server pt ip 8.1.1.50 key simple 123456 url http://8.1.1.50:8080/portal

 portal free-rule 1 source interface Bridge-Aggregation1 destination any

 portal host-check wlan

#

 wlan client learn-ipaddr enable

#

vlan 10

#

vlan 30

#

dhcp server ip-pool 30

 network 138.30.0.0 mask 255.255.0.0

 gateway-list 138.20.1.3   这个地方network和网关能不一个段吗，这个网关是路由器的网关，在控制器上指定吗

 dns-list 138.20.1.3

 dns-list 8.1.1.5

#

radius scheme portal

 primary authentication 8.1.1.50

 primary accounting 8.1.1.50

 key authentication simple 123456

 key accounting simple 123456

 user-name-format without-domain

 nas-ip 138.10.1.80

#

domain portal

 authentication portal radius-scheme portal

 authorization portal radius-scheme portal

 accounting portal radius-scheme portal

 access-limit disable

 state active

 idle-cut disable

 self-service-url disable

#

wlan service-template 30 clear

 ssid portal-local

 bind WLAN-ESS 30

 client forwarding-mode local

 client dhcp-server centralized

 service-template enable

#

interface Bridge-Aggregation1

 port link-type trunk

 port trunk permit vlan all

#

interface Vlan-interface10

 ip address 138.10.1.80 255.255.0.0

#

interface Vlan-interface30

 ip address 138.30.1.80 255.255.0.0

 portal server pt method direct

 portal domain portal

 portal nas-ip 138.10.1.80

 portal forwarding-mode local

#

interface Ten-GigabitEthernet1/0/1

 port link-type trunk

 port trunk permit vlan all

 port link-aggregation group 1

#

interface Ten-GigabitEthernet1/0/2

 port link-type trunk

 port trunk permit vlan all

port link-aggregation group 1

#

interface WLAN-ESS30

 port access vlan 30

#

wlan ap ap1 model WA2620E-AGN id 1

 serial-id 210235A42MB108000002

 map-configuration apcfg.txt

 radio 1

  channel 161

  service-template 30

  radio enable

 radio 2

#

 ip route-static 0.0.0.0 0.0.0.0 138.10.1.1

#

 arp-snooping enable

#

 dhcp enable

#

·              Router

#

dhcp server ip-pool 20

 network 138.20.0.0 mask 255.255.0.0

 option 43 hex 80070000 018A0A01 50

#

interface GigabitEthernet0/0

 port link-mode route

 ip address 138.10.1.3 255.255.0.0

#

interface GigabitEthernet0/1

 port link-mode route

 ip address 138.20.1.3 255.255.0.0

#

 ip route-static 0.0.0.0 255.0.0.0 138.10.1.1

#

 dhcp enable

#

·              SW

#

vlan 20

#

vlan 30

#

interface Vlan-interface20

 ip address 138.20.1.2 255.255.0.0

#

interface Vlan-interface30

 ip address 138.30.1.2 255.255.255.0 这个VLAN30跨三层怎么到核心和AC上的

#

interface GigabitEthernet1/0/1

 description routeg0/1

 port link-type trunk

 port trunk permit vlan all

#

interface GigabitEthernet1/0/2

 description ap-portal-local

 port link-type trunk

 port trunk permit vlan all

 port trunk pvid vlan 20

 poe enable

#

 ip route-static 0.0.0.0 0.0.0.0 138.20.1.3

#