华为AC6005内置portal服务配置指引

1、温州网新图灵数码科技有限公司林初光AC6005内置portal服务器配置600S配置方案 模拟例戒示意国路由器L泥,1&6.1. 1设备配置虬 eoo5a皿与上联设备通信IQ2 1B8 1 254初"as底接斗管理用102. 1B8. 98. Ivlan 100终端庾用192. 163. 100. 1PC0La ptopQi网络配置，vlanif 88 管理AP Vlanif 100 为业务vlan为终端分配地址开启DHCPAC6005dhcp enableInfo: The operation may take a few seconds. Please wait for

2、a moment.done.创建VLAN 88和100AC6005vlan batch 88 100Info: This operation may take a few seconds. Please wait for a moment.done.配置与上行设备通信接口的地址AC6005int Vlanif 1AC6005-Vlanif1ip address 54 AC6005-Vlanif1dhcp select interfaceAC6005-Vlanif1dhcp server dns-list 96配置VLAN

3、88和100的网关AC6005int vlan 88AC6005-Vlanif88ip address AC6005-Vlanif88dhcp select interfaceAC6005int vlan 100AC6005-Vlanif100ip address AC6005-Vlanif100dhcp select interfaceAC6005-Vlanif100dhcp server dns-list 96配置AC与AP相连的端口AC6005int g0/0

4、/8AC6005-GigabitEthernet0/0/8port link-type trunkAC6005-GigabitEthernet0/0/8port trunk pvid vlan 88AC6005-GigabitEthernet0/0/8undo port trunk allow-pass vlan 1AC6005-GigabitEthernet0/0/8port trunk allow-pass vlan 88 100AC6005int g0/0/7AC6005-GigabitEthernet0/0/7port link-type aAC6005-GigabitEthernet

5、0/0/7port link-type accessAC6005-GigabitEthernet0/0/7port default vlan 100AC6005ip route-static 创建登录用户AC6005aaaAC6005-aaalocal-user huawei password cipher huawei123Info: Add a new user.创建登录用户最大连接数AC6005-aaalocal-user huawei access-limit 5开启portal的web访问认证功，配置内置portal的SS搽略和端

6、口号(443已经被web端 口启用，不可用)AC6005portal local-server ip AC6005portal local-server https ssl-policy default_policy port 2000Info: Load web file successfully.配置免认证规则AC6005portal free-rule 0 destination ip 96 mask 55Info: This free rule configured successfully, only <

7、;0-63> can be commit to AP.配置wlan-ess接口，在接口调用内置portal与允许的认证域AC6005interface Wlan-Ess 1AC6005-Wlan-Ess1port hybrid pvid vlan 100AC6005-Wlan-Ess1port hybrid untagged vlan 100AC6005-Wlan-Ess1portal local-server enableAC6005-Wlan-Ess1permit-domain name default配置AC与AP之间的隧道通信AC6005wlanAC6005-wlan-vieww

8、lan ac source interface Vlanif 88配置AP的认证方式为免认证AC6005-wlan-viewap-auth-mode no-auth查看APAC6005-wlan-viewdis ap allAll AP information(Normal-1,UnNormal-0):AP APAP Profile AP AP/RegionID TypeMACIDStateSysname0 AP6310SN-GN 4862-7602-35d0 0/0 normal ap-0Total number: 1配置名为wmml的wmm模板，参数采用默认AC6005-wlan-view

9、wmm-profile name wmm1 id 1配置名为radio 1的radio模板，参数采用默认，调用 wmm模板AC6005-wlan-viewradio-profile name radio1 id 1、AC6005-wlan-radio-prof-radio1wmm-profile id 1配置名为trafficl的traffic模板，参数采用默认AC6005-wlan-viewtraffic-profile name traffic1 id 1配置名为security 1的安全模板，认证方式为 WEP认证，开放认证，不加密AC6005-wlan-viewsecurity-pro

10、file name scurity1 id 1创建名为service的服务集，并绑定流量模板和安全模板，wlan-ess接口AC6005-wlan-viewservice-set name service1 id 1AC6005-wlan-service-set-service1wlan-ess 1AC6005-wlan-service-set-service1ssid AC6005-wlan-service-set-service1traffic-profile id 1AC6005-wlan-service-set-service1security-profile id 1AC6005-w

11、lan-service-set-service1service-vlan 100Info: This action may cause service interruption if you don't execute commit command.配置AP对应的VAP,下发Wlan服务，AC6005-wlan-viewap 0 radio 0AC6005-wlan-radio-0/0radio-profile id 1Warning: Modify the Radio type may cause some parameters of Radio resume default value, are you sure to continue