无线控制器本地portal+ldap方案部署完成后， MAC-Trigger无感知不生效。

<HXJF-WX-WX2560>more startup.cfg 

#

 version 7.1.064, Release 5478

#

 sysname HXJF-WX-WX2560

#

wlan global-configuration

#

 telnet server enable

#

 port-security enable

#

 dhcp enable

#

 lldp global enable

#

 password-recovery enable

#

vlan 1

#

vlan 100

 description Link-To-WIFI

#

vlan 110

 description Link-To-AP_Manager

#

vlan 200

 description Link-To-SW_Manager

#

vlan 4093

 description WIFI_Guest

#

dhcp server ip-pool vlan100

 gateway-list 172.16.0.254

 network 172.16.0.0 mask 255.255.240.0

 dns-list 10.110.0.80 61.134.1.4

 expired day 0 hour 8

#

dhcp server ip-pool vlan110

 gateway-list 172.16.254.254

 network 172.16.254.0 mask 255.255.255.0

#

dhcp server ip-pool vlan4093

 gateway-list 192.168.201.254

 network 192.168.200.0 mask 255.255.254.0

 dns-list 223.5.5.5 61.134.1.4

 expired day 0 hour 5

#              

wlan service-template 1

 ssid JZDC

 akm mode psk

 preshared-key pass-phrase cipher $c$3$Ute/LE1dzOEc4WWw7UB/39mhHXU7qBzcuoeD9n9i

 cipher-suite ccmp

 security-ie rsn

 bss transition-management enable

 service-template enable

#

wlan service-template 2

 ssid JZDC_Guest

 akm mode psk

 preshared-key pass-phrase cipher $c$3$OzKW/ccD58kBb0+g6HdMJBiiaNfkzYuRaltLAQ==

 cipher-suite ccmp

 security-ie rsn

 bss transition-management enable

 portal enable method direct

 portal domain ***.***

 portal apply web-server portal

 portal apply mac-trigger-server localportal

 service-template enable

#

interface NULL0

#

interface Vlan-interface100

 ip address 172.16.0.254 255.255.240.0

#

interface Vlan-interface110

 description Link-To-AP_Manager

 ip address 172.16.254.254 255.255.255.0

#

interface Vlan-interface200

 ip address 10.210.254.252 255.255.255.0

#

interface Vlan-interface4093

 description WIFI_Guest

 ip address 192.168.201.254 255.255.254.0

#

interface GigabitEthernet1/0/4

 port link-mode route

 ip address 192.168.1.1 255.255.255.0

#

interface GigabitEthernet1/0/7

 port link-mode route

#

interface GigabitEthernet1/0/8

 port link-mode route

#

interface GigabitEthernet1/0/1

 port link-mode bridge

#

interface GigabitEthernet1/0/2

 port link-mode bridge

#

interface GigabitEthernet1/0/3

 port link-mode bridge

#

interface GigabitEthernet1/0/5

 port link-mode bridge

 description Link_UP_Ineternet_FW_Portal

 port access vlan 100

#

interface GigabitEthernet1/0/6

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan all

#

 scheduler logfile size 16

#              

line class console

 user-role network-admin

#

line class vty

 user-role network-operator

#

line con 0

 user-role network-admin

#

line vty 0 31

 authentication-mode scheme

 user-role network-operator

#

 ip route-static 0.0.0.0 0 10.210.254.254

#

 undo info-center logfile enable

#

 ssh server enable

 sftp server enable

#

acl advanced 3010

 rule 0 permit ip source 10.110.0.82 0

 rule 1 permit ip source 10.210.254.254 0

#

 undo password-control aging enable 

 undo password-control length enable 

 undo password-control composition enable 

 undo password-control history enable 

 password-control login-attempt 3 exceed lock-time 2

 password-control update-interval 0

 password-control login idle-time 0

#

ldap server ldap

 login-dn cn=administrator,cn=users,dc=jzdc,dc=com

 search-base-dn dc=jzdc,dc=com

 ip 10.110.0.80

 login-password cipher $c$3$YI062Olg3L5pA0gXUrT0Thai88Uff1m4nWgxNfD7+pk=

 user-parameters user-name-attribute samaccountname

#

ldap scheme ldap

 authentication-server ldap

#

domain ***.***

 authentication portal ldap-scheme ldap

 authorization portal none

 accounting portal none

#

domain system

#

 domain default enable system

#

role name level-0

 description Predefined level-0 role

#

role name level-1

 description Predefined level-1 role

#

role name level-2

 description Predefined level-2 role

#

role name level-3

 description Predefined level-3 role

#

role name level-4

 description Predefined level-4 role

#

role name level-5

 description Predefined level-5 role

#              

role name level-6

 description Predefined level-6 role

#

role name level-7

 description Predefined level-7 role

#

role name level-8

 description Predefined level-8 role

#

role name level-9

 description Predefined level-9 role

#

role name level-10

 description Predefined level-10 role

#

role name level-11

 description Predefined level-11 role

#

role name level-12

 description Predefined level-12 role

#

role name level-13

 description Predefined level-13 role

#

role name level-14

 description Predefined level-14 role

#

user-group system

#

local-user admin class manage

 password hash $h$6$KTgo/UphcrQPOAMF$wP4egLSPUP+7KLaUiI70WF9Oem5Fvy0piQR3wb425OeIPzQIaug2ipemomWb8FqKLiQ3jogmzew+Jn7siUCJYQ==

 service-type ftp

 service-type telnet http https

 authorization-attribute user-role network-admin

#

 portal free-rule 1 destination ip any tcp 53

 portal free-rule 2 destination ip any udp 53

 portal free-rule 3 destination ip 61.134.1.4 255.255.255.255

 portal free-rule 4 destination ip 218.30.19.40 255.255.255.255

 portal free-rule 5 destination ip 10.110.0.80 255.255.255.255

 portal free-rule 6 destination ip 223.5.5.5 255.255.255.255

 portal free-rule 10 destination ip 192.168.201.254 255.255.255.255

#

portal web-server portal

 url http://192.168.201.254/portal

#              

portal local-web-server http 

 default-logon-page defaultfile.zip

#

 ip http enable

 ip https enable

#

portal mac-trigger-server localportal

 ip 192.168.201.254

 aging-time 7200

 local-binding aging-time 129600

 local-binding enable

#

 wlan auto-ap enable

#

wlan ap-group default-group

 vlan 1

 radio 2.4g

 radio 5g

 radio 6g

 ap-model WA4320-ACN-SI

  radio 1

   radio enable

   channel band-width 40 

   service-template 1 vlan 100

   service-template 2 vlan 4093

  radio 2

   rate mandatory 11 

   rate supported 12 18 24 36 48 54 

   rate disabled 1 2 5.5 6 9 

   radio enable

   service-template 2 vlan 4093

   service-template 1 vlan 100

  gigabitethernet 1

#

wlan virtual-ap-group default-virtualapgroup

#

return