ap 设置portal web 认证后的问题

首先Portal正常配置，另外添加如下配置，并按照注释进行修改；

#

portal host-check enable

//按照现场DNS配置

portal free-rule 1 destination ip 114.114.114.114 255.255.255.255

portal free-rule 2 destination ip any udp 53

portal free-rule 3 destination ip any tcp 53

portal free-rule 4 destination ip any tcp 5223

//如果没有微信认证可以不放通微信

portal free-rule 10 destination short.weixin.qq.com

portal free-rule 11 destination mp.weixin.qq.com

portal free-rule 12 destination long.weixin.qq.com

portal free-rule 13 destination dns.weixin.qq.com

portal free-rule 14 destination minorshort.weixin.qq.com

portal free-rule 15 destination extshort.weixin.qq.com

portal free-rule 16 destination szshort.weixin.qq.com

portal free-rule 17 destination szlong.weixin.qq.com

portal free-rule 18 destination szextshort.weixin.qq.com

portal free-rule 19 destination isdspeed.qq.com

portal free-rule 20 destination ***.***

portal free-rule 21 destination wifi.weixin.qq.com

portal free-rule 22 destination oasisauth.h3c.com

portal safe-redirect enable

portal safe-redirect method get post

portal safe-redirect user-agent Android

portal safe-redirect user-agent CaptiveNetworkSupport

portal safe-redirect user-agent MicroMessenger

portal safe-redirect user-agent Mozilla

portal safe-redirect user-agent WeChat

portal safe-redirect user-agent iPhone

portal safe-redirect user-agent micromessenger

#

服务模板下添加

portal temp-pass period 20 enable

Portal服务器下配置添加如下配置（xxx处替换为现场Portal页面的链接）

captive-bypass ios optimize enable

if-match original-url http://captive.apple.com/hotspot-detect.html user-agent Mozilla temp-pass redirect-url http://XXXXXXXXX

if-match original-url http://www.apple.com user-agent Mozilla temp-pass redirect-url http://XXXXXX

if-match original-url http://10.168.168.168 temp-pass

可以加一下这些配置进行优化