MSG360-20 小贝WEB登陆后无法切换至专家模式

MSG360-20 WEB端登陆后无法切换至专家模式，是否是权限不够，应该在哪里修改权限！

# version 7.1.064, Release 5221 # sysname H3C # clock timezone Beijing add 08:00:00 clock protocol ntp # port-security enable # dialer-group 1 rule ip permit # ip redirects enable ip unreachables enable ip ttl-expires enable # nat alg h323 nat alg ils nat alg mgcp nat alg nbt nat alg rsh nat alg sccp nat alg sip nat alg sqlnet nat alg tftp nat alg xdmcp # dns server 211.138.106.7 ip host oauthindev.h3c.com 192.168.0.100 ip host www.spiritapp-wlan-ac.h3c.com 192.168.0.100 # maintain enable # module-proxy work-mode bridge # password-recovery enable # vlan 1 # vlan 10 # vlan 50 # vlan 60 # dhcp server ip-pool 1 gateway-list 192.168.0.100 network 192.168.0.0 mask 255.255.252.0 dns-list 192.168.0.100 # dhcp server ip-pool 100 gateway-list 172.16.100.1 network 172.16.100.0 mask 255.255.252.0 dns-list 172.16.100.1 # nqa entry xiaobei test type http frequency 5000 history-record enable history-record number 1 probe timeout 500 url http://www.baidu.com # nqa schedule xiaobei test start-time now lifetime forever # wlan service-template 1 ssid SenZeJiTuan vlan 50 akm mode psk preshared-key pass-phrase cipher $c$3$eF6lvVCT3X/ti8Pf3i/fyx0qM8lKGGclAtKZ cipher-suite ccmp security-ie rsn service-template enable # wlan service-template 2 ssid SenZeJiTuan-W vlan 60 akm mode psk preshared-key pass-phrase cipher $c$3$WPnELzrJPcKGkHJ0ZSw5mcY0QZ1XDZMYrnsChg== cipher-suite ccmp security-ie rsn service-template enable # controller Cellular1/0/6 # interface Dialer1 mtu 1492 ppp ipcp dns admit-any ppp ipcp dns request dialer bundle enable dialer-group 1 dialer timer idle 0 dialer timer autodial 60 ip address ppp-negotiate nat outbound # interface Dialer2 mtu 1492 ppp ipcp dns admit-any ppp ipcp dns request dialer bundle enable dialer-group 1 dialer timer idle 0 dialer timer autodial 60 ip address ppp-negotiate nat outbound # interface Dialer3 mtu 1492 ppp ipcp dns admit-any ppp ipcp dns request dialer bundle enable dialer-group 1 dialer timer idle 0 dialer timer autodial 60 ip address ppp-negotiate nat outbound # interface Dialer4 mtu 1492 ppp ipcp dns admit-any ppp ipcp dns request dialer bundle enable dialer-group 1 dialer timer idle 0 dialer timer autodial 60 ip address ppp-negotiate nat outbound # interface Dialer5 mtu 1492 ppp ipcp dns admit-any ppp ipcp dns request dialer bundle enable dialer-group 1 dialer timer idle 0 dialer timer autodial 60 ip address ppp-negotiate nat outbound # interface NULL0 # interface Vlan-interface1 # interface Vlan-interface10 ip address 10.0.0.88 255.255.255.128 # interface Vlan-interface50 ip address 10.10.40.254 255.255.255.0 # interface GigabitEthernet1/0/1 port link-mode bridge # interface GigabitEthernet1/0/2 port link-mode bridge # interface GigabitEthernet1/0/3 port link-mode bridge # interface GigabitEthernet1/0/4 port link-mode bridge port link-type trunk port trunk permit vlan all # interface GigabitEthernet1/0/5 port link-mode bridge port link-type trunk undo port trunk permit vlan 1 port trunk permit vlan 2 to 4094 # scheduler logfile size 16 # line class console user-role network-admin # line class vty user-role network-operator # line con 0 authentication-mode scheme user-role network-admin # line vty 0 31 authentication-mode scheme user-role network-operator # ip route-static 0.0.0.0 0 10.10.40.1 ip route-static 0.0.0.0 0 10.0.0.4 ip route-static 0.0.0.0 0 10.10.50.1 # undo info-center enable undo info-center logfile enable # nqa server enable # ntp-service enable ntp-service unicast-server ***.*** # domain cloud authentication portal none authorization portal none accounting portal none # domain extend-auth authentication portal none authorization portal none accounting portal none # domain system # domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group neiwang authorization-attribute user-profile pneiwang # user-group system # local-user admin class manage password hash $h$6$vS0DMPLerDjARREb$YgrKrYPkuTnvrH1hqSOKbJ+KvI3Es9++bs+8/YNeco80H3G790diTk5/+BTCisSFQ0VHD3Ltms837Udornm5zQ== service-type ssh telnet terminal http https authorization-attribute user-role network-admin # portal host-check enable portal free-rule 2 destination ip any udp 53 portal free-rule 3 destination ip any tcp 53 portal free-rule 4 destination short.weixin.qq.com portal free-rule 5 destination mp.weixin.qq.com portal free-rule 6 destination long.weixin.qq.com portal free-rule 7 destination dns.weixin.qq.com portal free-rule 8 destination minorshort.weixin.qq.com portal free-rule 9 destination extshort.weixin.qq.com portal free-rule 10 destination szshort.weixin.qq.com portal free-rule 11 destination szlong.weixin.qq.com portal free-rule 12 destination szextshort.weixin.qq.com portal free-rule 13 destination ***.*** portal free-rule 14 destination wifi.weixin.qq.com # portal web-server 1 url http://192.168.0.100 # portal web-server local-server url https://192.168.0.100/portal # portal web-server lvzhou-server url http://oasisauth.h3c.com/portal/protocol server-type oauth # portal local-web-server http # portal local-web-server https # portal extend-auth-server qq # portal extend-auth-server mail mail-protocol pop3 imap # ip http enable ip https enable # wlan auto-ap enable wlan auto-persistent enable # wlan global-configuration # wlan ap-group default-group vlan 1 ap-model SPM-X1-10 gigabitethernet 1 gigabitethernet 2 gigabitethernet 3 gigabitethernet 4 gigabitethernet 5 gigabitethernet 6 gigabitethernet 7 gigabitethernet 8 gigabitethernet 9 gigabitethernet 10 gigabitethernet 11 gigabitethernet 12 ap-model SPM-X1-24 gigabitethernet 1 gigabitethernet 2 gigabitethernet 3 gigabitethernet 4 gigabitethernet 5 gigabitethernet 6 gigabitethernet 7 gigabitethernet 8 gigabitethernet 9 gigabitethernet 10 gigabitethernet 11 gigabitethernet 12 gigabitethernet 13 gigabitethernet 14 gigabitethernet 15 gigabitethernet 16 gigabitethernet 17 gigabitethernet 18 gigabitethernet 19 gigabitethernet 20 gigabitethernet 21 gigabitethernet 22 gigabitethernet 23 gigabitethernet 24 ap-model WAP711H radio 1 radio enable bandwidth-guarantee enable ap-model WAP712C radio 1 radio enable bandwidth-guarantee enable radio 2 radio enable bandwidth-guarantee enable ap-model WAP712H radio 1 radio enable bandwidth-guarantee enable radio 2 radio enable bandwidth-guarantee enable ap-model WAP722 radio 1 radio enable bandwidth-guarantee enable radio 2 radio enable bandwidth-guarantee enable gigabitethernet 1 gigabitethernet 2 ap-model WAP722E radio 1 radio enable bandwidth-guarantee enable radio 2 radio enable bandwidth-guarantee enable gigabitethernet 1 gigabitethernet 2 ap-model WAP722E-W2 radio 1 radio enable bandwidth-guarantee enable radio 2 radio enable bandwidth-guarantee enable gigabitethernet 1 gigabitethernet 2 ap-model WAP722H radio 1 radio enable bandwidth-guarantee enable radio 2 radio enable bandwidth-guarantee enable ap-model WAP722S radio 1 radio enable bandwidth-guarantee enable radio 2 radio enable bandwidth-guarantee enable ap-model WAP722S-W2 radio 1 radio enable bandwidth-guarantee enable radio 2 radio enable bandwidth-guarantee enable gigabitethernet 1 ap-model WAP722X-W2 radio 1 radio enable bandwidth-guarantee enable radio 2 radio enable bandwidth-guarantee enable gigabitethernet 1 gigabitethernet 2 ap-model WAP723-W2 radio 1 radio enable bandwidth-guarantee enable radio 2 radio enable bandwidth-guarantee enable radio 3 radio enable bandwidth-guarantee enable module 1 gigabitethernet 1 gigabitethernet 2 # wlan ap 782c-290c-fca0 model WAP722X-W2 serial-id 219801A1GU8193E000DG vlan 1 radio 1 radio enable service-template 1 vlan 50 radio 2 radio enable service-template 2 vlan 60 gigabitethernet 1 gigabitethernet 2 # wlan ap 782c-2972-5960 model WAP722X-W2 serial-id 219801A1GU8194E0004D vlan 1 radio 1 radio enable service-template 1 vlan 50 radio 2 radio enable service-template 2 vlan 60 gigabitethernet 1 gigabitethernet 2 # wlan ap 782c-2972-9900 model WAP722X-W2 serial-id 219801A1GU8194E000NT vlan 1 radio 1 radio enable service-template 1 vlan 50 radio 2 radio enable service-template 2 vlan 60 gigabitethernet 1 gigabitethernet 2 # wlan ap 782c-2972-49a0 model WAP722X-W2 serial-id 219801A1GU8194E0000B vlan 1 radio 1 radio enable service-template 1 vlan 50 radio 2 radio enable service-template 2 vlan 60 gigabitethernet 1 gigabitethernet 2 # wlan ap 782c-2972-8d60 model WAP722X-W2 serial-id 219801A1GU8194E000KT vlan 1 radio 1 radio enable service-template 1 vlan 50 radio 2 radio enable service-template 2 vlan 60 gigabitethernet 1 gigabitethernet 2 # wlan ap 782c-2972-9a00 model WAP722X-W2 serial-id 219801A1GU8194E000P2 vlan 1 radio 1 radio enable service-template 1 vlan 50 radio 2 radio enable service-template 2 vlan 60 gigabitethernet 1 gigabitethernet 2 # wlan ap 782c-2972-9ac0 model WAP722X-W2 serial-id 219801A1GU8194E000P8 vlan 1 radio 1 radio enable service-template 1 vlan 50 radio 2 radio enable service-template 2 vlan 60 gigabitethernet 1 gigabitethernet 2 # wlan ap 7c1e-067a-7000 model WAP722X-W2 serial-id 219801A1GU818BE000GM vlan 1 radio 1 radio enable service-template 1 vlan 50 radio 2 radio enable service-template 2 vlan 60 gigabitethernet 1 gigabitethernet 2 # wlan whitelist mac-address 30b4-9ed2-bba6 wlan whitelist mac-address b429-3d0c-ae86 wlan whitelist mac-address b429-3d0c-ae87 wlan whitelist mac-address b429-3d0c-ae88 wlan whitelist mac-address b429-3d0c-ae89 wlan whitelist mac-address b429-3d0c-ae8a wlan whitelist mac-address b429-3d0c-ae8c wlan whitelist mac-address b429-3d0c-ae8d wlan whitelist mac-address b429-3d22-1751 wlan whitelist mac-address b429-3d22-1752 wlan whitelist mac-address b429-3d22-1753 wlan whitelist mac-address b8c7-4a63-281f wlan whitelist mac-address e8e8-b777-f0c0 # cloud-management server domain oasis.h3c.com # return