S5130-28S-SI + H3C ER5200G2 portal认证成功但无法上网

手机端提示认证成功但无法上网

dhcp server ip-pool vlan30 

 gateway-list 10.100.30.254 

 network 10.100.30.0 mask 255.255.255.0 

 dns-list 114.114.114.114 

 interface Vlan-interface10 

 ip address 10.100.10.253 255.255.255.0

# 

interface Vlan-interface30 

 description 无线 

 ip address 10.100.30.253 255.255.255.0 

 portal enable method direct 

 portal apply web-server secportal 

 interface Vlan-interface40 

 ip address 10.100.40.253 255.255.255.0

#

 ip route-static 0.0.0.0 0 10.100.10.254 

# 

 time-range alltime 00:00 to 23:59 daily 

 # 

 ntp-service unicast-server 120.25.115.20 

# 

 radius session-control enable

# 

radius scheme imc 

 primary authentication 10.100.40.12

 primary accounting 10.100.40.12 

 key authentication cipher $c$3$e5ZxBEJVwXJ+8KaHPUvc3rEu3WQzX7AjzQ==  

key accounting cipher $c$3$fqNo4gmUT2sBuvKHt8V0ct42B8o4SrjLQA== 

 user-name-format without-domain 

# 

radius scheme system 

 user-name-format without-domain

# 

domain ***.*** 

 authorization-attribute idle-cut 20 1024 

 authentication portal radius-scheme imc 

 authorization portal radius-scheme imc 

 accounting portal radius-scheme imc 

 # 

 domain default enable ***.***

# portal free-rule 0 source ip any destination ip 10.100.30.253 255.255.255.255  

portal free-rule 1 source ip 10.100.30.253 255.255.255.255 destination ip any 

portal free-rule 2 source ip any destination ip 61.177.7.1 255.255.255.255 

portal free-rule 3 source ip 61.177.7.1 255.255.255.255 destination ip any 

portal free-rule 4 source ip any destination ip 114.114.114.114 255.255.255.255 

portal free-rule 5 source ip 114.114.114.114 255.255.255.255 destination ip any 

portal free-rule 6 source ip any destination ip 172.17.1.0 255.255.255.0  

portal free-rule 7 source ip 172.17.1.0 255.255.255.0 destination ip any  

portal free-rule 8 source ip any destination ip 10.100.40.12 255.255.255.255  

portal free-rule 9 source ip 10.100.40.12 255.255.255.255 destination ip any  

portal free-rule 10 source ip any destination ip 10.100.30.254 255.255.255.255  

portal free-rule 11 source ip 10.100.30.254 255.255.255.255 destination ip any  

# 

portal web-server secportal 

 url http://10.100.30.253:8080/portal 

 server-detect interval 50 log

# 

portal local-web-server http 

 default-logon-page portal.zip 

 tcp-port 8080

日志:

%Aug 29 23:21:57:416 2019 SW-01 SOCKET/6/TCP_SYNFLOOD: atckType(1016)=(05)SYN-flood;srcIPAddr(1017)=10.100.40.3;destIPAddr(1019)=10.100.30.253;atckSpeed(1047)=300;atckTime_cn(1048)=20190829232157 

%Aug 29 23:21:59:394 2019 SW-01 SOCKET/6/TCP_SYNFLOOD: atckType(1016)=(05)SYN-flood;srcIPAddr(1017)=10.100.40.3;destIPAddr(1019)=10.100.30.253;atckSpeed(1047)=300;atckTime_cn(1048)=20190829232159 

%Aug 29 23:22:00:200 2019 SW-01 SOCKET/6/TCP_SYNFLOOD: atckType(1016)=(05)SYN-flood;srcIPAddr(1017)=10.100.40.3;destIPAddr(1019)=10.100.30.253;atckSpeed(1047)=300;atckTime_cn(1048)=20190829232200  

%Aug 29 23:22:53:747 2019 SW-01 PORTAL/6/PORTAL_USER_LOGOFF: -UserName=[test]-IPAddr=[10.100.30.1]-IfName=[Vlan-interface30]-VlanID=[30]-MACAddr=[342e-b6e8-d68d]-Reason=User Request-InputOctets=0-Output Octets=0-Input Gigawords=0-Output Gigawords=0;User logged off. 

%Aug 29 23:22:56:977 2019 SW-01 PORTAL/6/PORTAL_USER_LOGON_SUCCESS: -UserName=[test]-IPAddr=[10.100.30.1]-IfName=[Vlan-interface30]-VlanID=[30]-MACAddr=[342e-b6e8-d68d]:User got online successfully.