WX3024 Mac地址认证不成功

任务要求：配置AC和建立RAIDUS服务器（Win2008_r2），手持终端（PDA和手机）需要通过MAC地址认证放行

问题：MAC地址只处于连接状态，不能成功验证通过

以下是命令行：

#

 sysname H3C

#

 domain default enable system 

#

 telnet server enable 

#

 port-security enable 

#

 oap management-ip 192.168.6.250 slot 0

#

 wlan auto-ap enable

#

 password-recovery enable

#

 wlan capture file-name SnifferRecord

#

接口配置（略）

#

radius scheme mac

 primary authentication 192.168.6.253

 primary accounting 192.168.6.253

 key authentication cipher $c$3$xwQerkLRnNejWOuUGcohWGb6T3AKAHYWFQ==

 key accounting cipher $c$3$a+bOgUuQpN4m8HdNToOTCpAuXumaL6BLNw==

 user-name-format without-domain

#

domain mac 

 authentication default radius-scheme mac

 authorization default radius-scheme mac

 accounting default radius-scheme mac

 access-limit disable 

 state active 

 idle-cut disable 

 self-service-url disable 

domain system 

 access-limit disable 

 state active 

 idle-cut disable 

 self-service-url disable 

#

dhcp server ip-pool 0

 network 192.168.6.0 mask 255.255.255.0

 gateway-list 192.168.6.251 

#

wlan service-template 4 crypto

 ssid zhw65

 beacon ssid-hide

 bind WLAN-ESS 3

 cipher-suite ccmp

 security-ie rsn

 service-template enabl

#

interface GigabitEthernet1/0/1

 port link-type trunk

 port trunk permit vlan all

 mac-authentication domain mac

#

interface GigabitEthernet1/0/2

 port link-type trunk

 port trunk permit vlan all

#

interface WLAN-ESS3

 port access vlan 22

 port-security port-mode mac-and-psk 

 port-security tx-key-type 11key 

 port-security preshared-key pass-phrase cipher $c$3$ay9FOLDMM2sdMEPrGtHXZJTdKKWI0ptqsubBQAxT 

 mac-authentication domain mac

#

wlan ap ap-40 model WA2620i-AGN id 40

 serial-id 219801A0CNC15C001803

 radio 1 

 radio 2 

  service-template 1

  service-template 4

  service-template 5

  radio enable