跨三层portal认证，现在终端访问https网页无法跳转到portal页面，http的则可以

S7506E对接锐捷SMP+做跨三层portal认证，现在终端访问https网页无法跳转到portal页面，http的则可以

关键配置：

#

 portal free-rule 1 destination ip 10.211.207.11 255.255.255.255

 portal free-rule 2 destination ip 8.8.8.8 255.255.255.255

 portal free-rule 3 destination ip 114.114.114.114 255.255.255.255

 portal free-rule 4 source ip 10.211.135.10 255.255.255.255

 portal free-rule 5 source ip 10.211.135.69 255.255.255.255

 portal free-rule 6 destination ip 61.139.2.69 255.255.255.255

 portal free-rule 7 destination ip 10.20.198.125 255.255.255.255

 portal free-rule 8 destination ip 10.211.135.1 255.255.255.255

 portal free-rule 9 destination ip 10.211.254.30 255.255.255.255

 portal free-rule 10 destination ip 10.211.207.1 255.255.255.255

#

portal web-server kdszww

 url http://10.211.207.11/eportal/index.jsp

 url-parameter mac source-mac

 url-parameter nasip value 10.211.207.1

 url-parameter t value wireless-v2-plain

 url-parameter url original-url

 url-parameter wlanacname value S7506E

 url-parameter wlanuserip source-address

#

portal server kdszww

 ip 10.211.207.11 key cipher $c$3$ptxL5Zebruf4DcFtn92iMyaGz7nhwwL5KPKyb3U=

#

#

 radius session-control enable

#

radius scheme kdszww

 primary authentication 10.211.207.11

 primary accounting 10.211.207.11

 key authentication cipher $c$3$2OjfnHNIoCEBTV6HikiMbQXkcVcj5ubQtFcruhM=

 key accounting cipher $c$3$zgnZWpGO47DiW8f/hAzwn9SonyZ0nb64huyHqOg=

 user-name-format without-domain

#

domain kdszww

 authentication portal radius-scheme kdszww

 authorization portal radius-scheme kdszww

 accounting portal radius-scheme kdszww

#

domain system

#

 domain default enable kdszww

#

#

interface Vlan-interface107

 ip address 10.211.254.30 255.255.255.252

 portal enable method layer3

 portal bas-ip 10.211.207.1

 portal apply web-server kdszww

#

return

组网 终端----网关-------核心交换机（S7506E）------路由器----防火墙---外网，其中锐捷SMP+旁挂在S7506E上