DCN DCSW-6028-pro 内部portal认证(旧版本)

首先将AC与AP相连并配置一个网络,这里我配置的是network201

网络配置：

AC(config)#
 wireless //无线交换机配置模式
  ap database xx-xx-xx-xx-xx-xx //ap MAC地址 //进入AP数据库配置模式
exit
   ap authentication mac //AP MAC地址认证
  enable //开启AC无线交换
  auto-ip-assign //开启AP自动IP地址分配模式
  network 201 //进入网络配置模式
   ssid skills-5.0 //配置网络服务名称
   vlan 10 //设置网络默认的VLAN标识
exit
 ap profile 1
  radio 1
   enable
   vap 15
    enable
    network 201
exit
exit

captive-portal 配置：

AC(config)#
 captive-portal
  enable
  authentication-type internal //认证模式为内置portal
  free-resource 1 destination ipv4 172.16.100.1/32 source any  //资源策略
  user wx //设置用户
   password 12345678 
   group 1 //加入组
exit     
 configuration 1 //进入portal模式
  enable
  verification local //配置验证模式
  group 1 //加入组   
  redirect attribute url-after-login enable       |
  redirect attribute url-after-login name url     |
  redirect attribute ssid enable                  | 配置portal重定向URL的属性
  redirect attribute apmac enable                 |
  redirect attribute usermac enable               |
  redirect attribute usermac name wlanmac         |
  ac-name AC
  redirect url-head http://172.16.100.1:53727/Portal/Html/default_pc.html?id=default
  free-resource 1 //这里是将访问的地址从定向内部portal认证模板
  interface ws-network 201 //关联网络接口

访问外网：

自动跳转到AC内部port认证界面：

输入用户名和密码就能访问外网了

AC 配置结果：

AC#show wireles ap status //查看AP状态

    MAC Address                                                            Configuration                
 (*) Peer Managed  IP Address                              Profile Status     Status           Age      
------------------ --------------------------------------- ------- ------- ------------- --------------
xx-xx-xx-xx-xx-xx 172.16.100.2                              1        Managed Success       0d:00:00:03
                                                                         管理成功
Total Access Points............................ 1


AC#show running-config 
!
no service password-encryption
!
hostname AC
sysLocation China
sysContact 400-810-9119
!
authentication logging enable
!
username admin privilege 15 password 0 admin
!
authentication line console login local
!
!
!
!
!
!
!
!
service dhcp
!
ip dhcp pool ap
 network-address 172.16.100.0 255.255.255.0
 lease infinite 
 default-router 172.16.100.1
!
!
!
!
!
!
!
!
Interface Ethernet0
!
!
!
vlan 1;10
!
!
Interface Ethernet1/0/1
!
Interface Ethernet1/0/2
!
Interface Ethernet1/0/3
!
Interface Ethernet1/0/4
!
Interface Ethernet1/0/5
!
Interface Ethernet1/0/6
!
Interface Ethernet1/0/7
!
Interface Ethernet1/0/8
!
Interface Ethernet1/0/9
!
Interface Ethernet1/0/10
 switchport mode trunk
 switchport trunk native vlan 10
!
Interface Ethernet1/0/11
!
Interface Ethernet1/0/12
!
Interface Ethernet1/0/13
!
Interface Ethernet1/0/14
!
Interface Ethernet1/0/15
!
Interface Ethernet1/0/16
!
Interface Ethernet1/0/17
!
Interface Ethernet1/0/18
!
Interface Ethernet1/0/19
!
Interface Ethernet1/0/20
!
Interface Ethernet1/0/21
!
Interface Ethernet1/0/22
!
Interface Ethernet1/0/23
!
Interface Ethernet1/0/24
!
Interface Ethernet1/0/25
!
Interface Ethernet1/0/26
!
Interface Ethernet1/0/27
!
Interface Ethernet1/0/28
!
interface Vlan1
!
interface Vlan10
 ip address 172.16.100.1 255.255.255.0
!
no login
ucs enable
wireless
 auto-ip-assign
 ap authentication mac
 discovery vlan-list 10
 network 1
!
 network 2
!
 network 3
!
 network 4
!
 network 5
!
 network 6
!
 network 7
!
 network 8
!
 network 9
!
 network 10
!
 network 11
!
 network 12
!
 network 13
!
 network 14
!
 network 15
!
 network 16
!
 network 200
!
 network 201
  ssid skills-5.0
  vlan 10
!
 ap load-balance template 1
!
 ap air-match template 1
  air-match load-balance session
  air-match load-balance session 2
!
 ap profile 1
  name Default
  air-match template 1
  radio 1
   vap 0
!
   vap 1
!
   vap 9
!
   vap 14
!
!
  radio 2
   vap 0
!         
   vap 1
!
   vap 15
    enable
    network 201
!
!
  radio 3
   vap 0
!
!
!
 ap database xx-xx-xx-xx-xx-xx
!
!
captive-portal
 enable
 authentication-type internal
 free-resource 1 destination ipv4 172.16.100.1/32 source any
 user wx
  password 12345678
  group 1
!         
 configuration 1
  enable
  verification local
  group 1
  redirect attribute url-after-login enable
  redirect attribute url-after-login name url
  redirect attribute ssid enable
  redirect attribute apmac enable
  redirect attribute usermac enable
  redirect attribute usermac name wlanmac
  ac-name AC
  redirect url-head http://172.16.100.1:53727/Portal/Html/default_pc.html?id=default
  free-resource 1
  interface ws-network 201
!
!
end