3.3命令行配置

<H3C>system-view

#开启DNS代理

[H3C]dns proxy enable

#开启DNS代理

[H3C]ip host weixin.h3c.com 192.168.0.1

#在内网口上开启portal认证 

[H3C]int vlan  1 

[H3C-Vlan-interface1]portal enable method direct  

[H3C-Vlan-interface1]portal domain PortalEnableDomain       

[H3C-Vlan-interface1]portal apply web-server PortalEnableWebSrv

[H3C-Vlan-interface1]quit

#配置认证域

[H3C]domain portalenabledomain    

[H3C-isp-portalenabledomain]authorization-attribute session-timeout 60

[H3C-isp-portalenabledomain]authentication portal none

[H3C-isp-portalenabledomain]authorization portal none

[H3C-isp-portalenabledomain]accounting portal none

[H3C-isp-portalenabledomain]quit

#放通到DNS以及微信和QQ的策略

[H3C]portal free-rule 0 destination ip any tcp 53  

[H3C]portal free-rule 1 destination ip any udp 53

[H3C]portal free-rule 2 destination *qq.com

[H3C]portal free-rule 3 destination long.weixin.qq.com

[H3C]portal free-rule 4 destination szlong.weixin.qq.com

[H3C]portal free-rule 5 destination extshort.weixin.qq.com

[H3C]portal free-rule 6 destination szshort.weixin.qq.com

[H3C]portal free-rule 7 destination mp.weixin.qq.com

[H3C]portal free-rule 8 destination szextshort.weixin.qq.com

[H3C]portal free-rule 9 destination short.weixin.qq.com

[H3C]portal free-rule 10 destination minorshort.weixin.qq.com

[H3C]portal free-rule 11 destination dns.weixin.qq.com

 #配置Portal web-server

[H3C]portal web-server PortalEnableWebSrv

[H3C-portal-websvr-PortalEnableWebSrv]

url http://weixin.h3c.com/portal/guanzhu.htm

[H3C-portal-websvr-PortalEnableWebSrv]captive-bypass enable   

[H3C-portal-websvr-PortalEnableWebSrv]quit

#配置认证后弹出的界面为“weixin.zip”

[H3C]portal local-web-server http      

[H3C-portal-local-websvr-http]default-logon-page weixin.zip

[H3C-portal-local-websvr-http]quit

#保存配置信息

[H3C]save force

3.4 公众号认证配置

#登录公众号管理平台，点击左侧的“自动回复”。

#在被添加自动回复文本框里输入自定义的URL：

<a href="http://weixin.h3c.com/portal/wxlogin.html?type=ip">点击上网</a>

#保存后，还需要针对已经关注过的微信用户，做关键字回复，例如回复公众号“上网”，就回复认证链接给用户。