MSG360S+终端接入

自动上线后固化ap，关闭自动上线

配置如下

<17F-AC>dis cu
#
 version 7.1.064, Release 5446P06
#
 sysname 17F-AC
#
 clock timezone Beijing add 08:00:00
 clock protocol ntp
#
wlan global-configuration
 region-code-lock enable
 nas-id cm-0-1497400-219801A1XPP20800008N
 calibrate-channel self-decisive enable all
#
 telnet server enable
#
 dns server 192.168.3.1
 dns server 114.114.114.114
#
 lldp global enable
#
 password-recovery enable
#
vlan 1
#             
wlan service-template employee
 ssid WU-SD   
 akm mode psk 
 preshared-key pass-phrase cipher $c$3$nCnPCjhve8L3r5YoGxbWLxeoWBvuasPSbHgctOk=
 cipher-suite ccmp
 security-ie rsn
 security-ie wpa
 service-template enable
#             
wlan service-template portal-test
 ssid WU-portal-test
 akm mode psk 
 preshared-key pass-phrase cipher $c$3$GI3c+5nuN9kpu5TIos/deMreYCvHa8ji+FNFlks=
 cipher-suite ccmp
 security-ie rsn
 security-ie wpa
 portal enable method direct
 portal domain cloud
 portal apply web-server cloud
 service-template enable
#             
wlan service-template st_6394193098252321
 portal domain cloud
 portal apply web-server st_6394193098252321
 portal temp-pass period 20 enable
#             
wlan service-template wu-sd-2
 ssid WU-SD-2 
 service-template enable
#             
interface NULL0
#             
interface Vlan-interface1
 ip address 192.168.3.2 255.255.254.0
#             
interface GigabitEthernet1/0/1
 port link-mode bridge
#             
interface GigabitEthernet1/0/2
 port link-mode bridge
#             
interface GigabitEthernet1/0/3
 port link-mode bridge
#             
interface GigabitEthernet1/0/4
 port link-mode bridge
#             
interface GigabitEthernet1/0/5
 port link-mode bridge
#             
 scheduler logfile size 16
#             
line class console
 user-role network-admin
#             
line class vty
 user-role network-operator
#             
line con 0    
 user-role network-admin
#             
line vty 0 31 
 authentication-mode scheme
 user-role network-operator
#             
 ip route-static 0.0.0.0 0 192.168.3.1
#             
 undo info-center logfile enable
#             
 ntp-service enable
 ntp-service unicast-server ***.***
 ntp-service unicast-server registry.h3c.com priority
 ntp-service unicast-server ***.***
 ntp-service unicast-server ***.***
#             
domain cloud  
 authorization-attribute idle-cut 30 10240
 authorization-attribute session-timeout 360
 authentication lan-access local
 accounting lan-access local
 authentication portal none
 authorization portal none
 accounting portal none
#             
domain system 
#             
 domain default enable system
#             
role name level-0
 description Predefined level-0 role
#             
role name level-1
 description Predefined level-1 role
#             
role name level-2
 description Predefined level-2 role
#             
role name level-3
 description Predefined level-3 role
#             
role name level-4
 description Predefined level-4 role
#             
role name level-5
 description Predefined level-5 role
#             
role name level-6
 description Predefined level-6 role
#             
role name level-7
 description Predefined level-7 role
#             
role name level-8
 description Predefined level-8 role
#             
role name level-9
 description Predefined level-9 role
#             
role name level-10
 description Predefined level-10 role
#             
role name level-11
 description Predefined level-11 role
#             
role name level-12
 description Predefined level-12 role
#             
role name level-13
 description Predefined level-13 role
#             
role name level-14
 description Predefined level-14 role
#             
user-group system
#             
local-user admin class manage
 password hash $h$6$C+cRbuB2n9a4KRTw$YG5yVfZ+/aPgqVHbPdXO2w/dMufZw0jXtd4HmSaB13flTfE6E00cY85swUreSBZbQBXLsqJMrpsoeUunwPv+FQ==
 service-type telnet http https
 authorization-attribute user-role network-admin
#             
 portal free-rule 2346257224 destination open.weixin.qq.com
 portal free-rule 2346257225 destination ip any tcp 5223
 portal free-rule 2346257226 destination ip 114.114.114.114 255.255.255.255
 portal free-rule 2346257227 destination ip any udp 53
 portal free-rule 2346257228 destination ip any tcp 53
 portal free-rule 2346257229 destination oasisauth.h3c.com
 portal free-rule 2346257230 destination short.weixin.qq.com
 portal free-rule 2346257231 destination mp.weixin.qq.com
 portal free-rule 2346257232 destination long.weixin.qq.com
 portal free-rule 2346257233 destination dns.weixin.qq.com
 portal free-rule 2346257234 destination minorshort.weixin.qq.com
 portal free-rule 2346257235 destination extshort.weixin.qq.com
 portal free-rule 2346257236 destination szshort.weixin.qq.com
 portal free-rule 2346257237 destination szlong.weixin.qq.com
 portal free-rule 2346257238 destination szextshort.weixin.qq.com
 portal free-rule 2346257239 destination isdspeed.qq.com
 portal free-rule 2346257240 destination ***.***
 portal free-rule 2346257241 destination long.open.weixin.qq.com
 portal free-rule 2346257242 destination res.wx.qq.com
 portal free-rule 2346257243 destination wifi.weixin.qq.com
 portal safe-redirect enable
 portal safe-redirect user-agent Android
 portal safe-redirect user-agent CaptiveNetworkSupport
 portal safe-redirect user-agent MicroMessenger
 portal safe-redirect user-agent Mozilla
 portal safe-redirect user-agent WeChat
 portal safe-redirect user-agent micromessenger
#             
portal web-server cloud
 url http://oasisauth.h3c.com/portal/protocol
 server-type oauth
 if-match user-agent CaptiveNetworkSupport redirect-url http://oasisauth.h3c.com/generate_404
 if-match user-agent Dalvik/2.1.0(Linux;U;Android7.0;HUAWEI redirect-url http://oasisauth.h3c.com/generate_404
#             
portal web-server portal-test
 url http://oasisauth.h3c.com/portal/protocol
 server-type oauth
 if-match user-agent CaptiveNetworkSupport redirect-url http://oasisauth.h3c.com/generate_404
 if-match user-agent Dalvik/2.1.0(Linux;U;Android7.0;HUAWEI redirect-url http://oasisauth.h3c.com/generate_404
 if-match original-url http://10.168.168.168 temp-pass
 if-match original-url http://captive.apple.com user-agent Mozilla temp-pass redirect-url http://oasisauth.h3c.com/portal/protocol
 if-match original-url ***.***/wifi/echo temp-pass redirect-url http://oasisauth.h3c.com/generate_404
 if-match original-url http://www.apple.com user-agent Mozilla temp-pass redirect-url http://oasisauth.h3c.com/portal/protocol
#             
portal web-server st_6394193098252321
 url http://oasisauth.h3c.com/portal/protocol
 server-type oauth
 if-match user-agent CaptiveNetworkSupport redirect-url http://oasisauth.h3c.com/generate_404
 if-match user-agent Dalvik/2.1.0(Linux;U;Android7.0;HUAWEI redirect-url http://oasisauth.h3c.com/generate_404
 if-match original-url http://10.168.168.168 temp-pass
 if-match original-url http://captive.apple.com user-agent Mozilla temp-pass redirect-url http://oasisauth.h3c.com/portal/protocol
 if-match original-url ***.***/wifi/echo temp-pass redirect-url http://oasisauth.h3c.com/generate_404
 if-match original-url http://www.apple.com user-agent Mozilla temp-pass redirect-url http://oasisauth.h3c.com/portal/protocol
#             
portal local-web-server http
#             
portal local-web-server https
#             
 netconf soap http enable
#             
 ip http enable
 ip https enable
#             
portal mac-trigger-server cloud
 binding-retry 2 interval 3
 cloud-binding enable
#             
 smartmc tm username admin password cipher $c$3$To+BR8dg646cqKKBLjQ7l5yP8hl+QLef enable
#             
 wlan auto-ap enable
 wlan auto-persistent enable
#             
wlan ap-group 17f-employee
 provision auto-update enable
 vlan 1       
 ap TEST1     
 ap b044-1441-6f40
#             
wlan ap-group 17f-employee-722
 vlan 1       
 ap 703d-158c-5fc0
 ap 703d-158c-6320
 ap-model WAP722
  radio 1     
   radio enable
  radio 2     
   radio enable
  gigabitethernet 1
  gigabitethernet 2
#             
wlan ap-group 17f-employee-722s
 tunnel encryption enable
 vlan 1       
 ap-model WAP722S-W2
  radio 1     
   radio enable
   service-template employee
  radio 2     
   radio enable
   service-template employee
  gigabitethernet 1
#             
wlan ap-group 17f-employee-723
 vlan 1       
 ap 1019-6506-4a10
 ap 1019-6506-53a0
 ap 1019-6506-76e0
 ap 1019-6506-9600
 ap 943b-b05d-e7e0
 ap f010-9046-8060
 ap-model WAP723-W2
  radio 1     
   radio enable
   service-template employee
  radio 2     
   radio enable
   service-template employee
  radio 3     
   radio enable
  gigabitethernet 1
  gigabitethernet 2
#             
wlan ap-group default-group
 vlan 1       
#             
wlan virtual-ap-group default-virtualapgroup
#             
wlan ap 1019-6506-9600 model WAP723-W2
 serial-id 219801A1GT8208E000NW
 vlan 1       
 radio 1      
  service-template employee
  service-template portal-test
  service-template wu-sd-2
 radio 2      
  service-template employee
  service-template portal-test
  service-template wu-sd-2
 radio 3      
  service-template employee
  service-template portal-test
  service-template wu-sd-2
 gigabitethernet 1
 gigabitethernet 2
#             
wlan ap 1019-6506-4a10 model WAP723-W2
 serial-id 219801A1GT8208E0007T
 vlan 1       
 radio 1      
  service-template employee
  service-template portal-test
  service-template wu-sd-2
 radio 2      
  service-template employee
  service-template portal-test
  service-template wu-sd-2
 radio 3      
  service-template employee
  service-template portal-test
  service-template wu-sd-2
 gigabitethernet 1
 gigabitethernet 2
#             
wlan ap 1019-6506-53a0 model WAP723-W2
 serial-id 219801A1GT8208E0009G
 vlan 1       
 radio 1      
  service-template employee
  service-template portal-test
  service-template wu-sd-2
 radio 2      
  service-template employee
  service-template portal-test
  service-template wu-sd-2
 radio 3      
  service-template employee
  service-template portal-test
  service-template wu-sd-2
 gigabitethernet 1
 gigabitethernet 2
#             
wlan ap 1019-6506-76e0 model WAP723-W2
 serial-id 219801A1GT8208E000HJ
 vlan 1       
 radio 1      
  service-template employee
  service-template portal-test
  service-template wu-sd-2
 radio 2      
  service-template employee
  service-template portal-test
  service-template wu-sd-2
 radio 3      
  service-template employee
  service-template portal-test
  service-template wu-sd-2
 gigabitethernet 1
 gigabitethernet 2
#             
wlan ap 703d-158c-6320 model WAP722
 serial-id 219801A0Q19171G00091
 vlan 1       
 radio 1      
  service-template employee
  service-template portal-test
  service-template wu-sd-2
 radio 2      
  service-template employee
  service-template portal-test
  service-template wu-sd-2
 gigabitethernet 1
 gigabitethernet 2
#             
wlan ap 703d-158c-5fc0 model WAP722
 serial-id 219801A0Q19171G00128
 vlan 1       
 radio 1      
  service-template employee
  service-template portal-test
  service-template wu-sd-2
 radio 2      
  service-template employee
  service-template portal-test
  service-template wu-sd-2
 gigabitethernet 1
 gigabitethernet 2
#             
wlan ap 943b-b05d-e7e0 model WAP722S-W2
 serial-id 219801A1GW819CE002ST
 vlan 1       
 radio 1      
  service-template employee
  service-template portal-test
  service-template wu-sd-2
 radio 2      
  service-template employee
  service-template portal-test
  service-template wu-sd-2
 gigabitethernet 1
#             
wlan ap f010-9046-8060 model WAP722S-W2
 serial-id 219801A1GW8203E0011F
 vlan 1       
 radio 1      
  service-template employee
  service-template portal-test
  service-template wu-sd-2
 radio 2      
  service-template employee
  service-template portal-test
  service-template wu-sd-2
 gigabitethernet 1
#             
 cloud-management server domain oasis.h3c.com
#             
return        
<17F-AC>      
<17F-AC>