本地Portal认证典型配置(专家模式Web版)
目录
1简介··························································································································································22特性使用指南···········································································································································22.1使用场合··············································································································································· 22.2配置前提··············································································································································· 23配置举例··················································································································································23.1组网需求··············································································································································· 23.2配置AC ················································································································································ 23.3配置Switch··········································································································································· 83.4验证结果··············································································································································· 94相关资料··················································································································································9
1简介
本文档介绍基于本地Portal Web服务器的直接Portal认证典型配置。
2特性使用指南
2.1使用场合
适用于对Portal服务器要求不高且接入用户不多的场景。
2.2配置前提
本文档不严格与具体软、硬件版本对应，如果使用过程中与产品实际情况有差异，请以设备实际情况为准。
本文档中的配置均是在实验室环境下进行的配置和验证，配置前设备的所有参数均采用出厂时的缺省配置。如果您已经对设备进行了配置，为了保证配置效果，请确认现有配置和以下举例中的配置不冲突。
3配置举例
3.1组网需求
如图1所示，Switch作为DHCP服务器为AP和Client分配IP地址。现要求：
•AC同时承担Portal Web服务器和Portal认证服务器的职责。•采用直接方式的Portal认证。
3.2配置AC
1.配置AC基本功能
在AC上完成IP地址、接口、AP接入和射频状态相关配置（略）。
2.配置认证域
(1)选择页面底部的<网络>按钮，进入网络菜单页面。
(2)选择页面左侧导航栏的[网络安全/认证]，进入“ISP域”页签，单击“”按钮，进入“添加ISP域”页面，配置如下：
配置ISP域名为dm1；勾选接入方式为“Portal”，并勾选AAA认证、授权和计费方法为本地认证、本地授权和不计费；配置用户闲置切断时间为15分钟；配置用户在闲置切断时间内产生的数据流量为1024字节；其它保持缺省配置；点击<确定>按钮完成配置。
3.配置本地用户
(1)选择页面底部的<网络>按钮，进入网络菜单页面。
(2)选择页面左侧导航栏的[网络安全/用户管理]，进入“本地用户”页面，单击“”按钮，进
入“添加用户”页面，配置如下：配置用户名为portal；密码为portal123；勾选可用服务为Portal；其它保持缺省配置；点击<确定>按钮完成配置。
4.配置Portal认证
(1)选择页面底部的<网络>按钮，进入网络菜单页面。
(2)选择页面左侧导航栏的[网络安全/接入管理]，进入“Portal”页签，点击“Portal Web服务器”，
然后点击“”按钮，进入“创建Portal Web服务器”页面，配置如下：配置Portal Web服务器名称为portal；配置Portal Web服务器的URL为http://2.2.2.1/portal；其它保持缺省配置；点击<确定>按钮完成配置。
(3)在“Portal”页签，点击“本地Portal Web服务器”，然后点击“”按钮，进入“创建本地Portal Web服务器”页面，配置如下：
使用HTTP协议和客户端交互认证信息；选择缺省认证页面文件为defaultfile.zip；其它保持缺省配置；点击<确定>按钮完成配置。
点击“免认证规则”，然后点击“”按钮新增免认证规则，配置规则编号为1，勾选“基于IP配置->任意IPv4 ->UDP端口号”并配置端口号为53，点击<确定>按钮完成操作。
点击“免认证规则”，然后点击“”按钮新增免认证规则，配置规则编号为2，勾选“基于IP配置->任意IPv4 ->TCP端口号”并配置端口号为53，点击<确定>按钮完成操作。
5.配置无线服务
(1)选择页面底部的<网络>按钮，进入网络菜单页面。
(2)选择页面左侧导航栏的[无线配置/无线网络]，进入“无线网络”页面，单击“”按钮，进
入“新增无线服务”页面，配置如下：配置无线服务名称为service11；配置SSID为service22；配置VLAN为200；勾选“IPv4 Portal认证”；−配置接入无线服务的Portal用户使用的认证域为dm1；−在无线服务模板service11上引用Portal Web服务器portal；开启无线服务service11；其它保持缺省配置；点击<确定>按钮完成配置。
图8配置无线服务
(3)将无线服务service11绑定到AP射频（略）。
3.3配置Switch
#创建VLAN 100，用于转发AC和AP间CAPWAP隧道内的流量。