华为ac配置radius认证服务器_AC6005内置portal+外置radius认证失败

AC配置

#

portal local-server ip 10.66.99.2

portal local-server https ssl-policy default_policy port 8443

#

info-center timestamp log format-date

#

vlan batch 99 160 to 167 253 998 1013

#

wlan ac-global carrier id other ac id 1

#

portal free-rule 0 destination ip 10.66.0.110 mask 255.255.255.255

portal free-rule 1 destination ip 10.66.0.115 mask 255.255.255.255

#

diffserv domain default

#

radius-server template radius_huawei

radius-server shared-key cipher %@%@F@XF,p$~C1~H=+MM)fv49>On%@%@

radius-server authentication 10.66.15.83 1812 weight 80

undo radius-server user-name domain-included

#

pki realm default

enrollment self-signed

#

ssl policy default_policy type server

pki-realm default

aaa

authentication-scheme default

authentication-scheme radius_huawei

authentication-mode radius

authorization-scheme default

accounting-scheme default

domain default

domain default_admin

domain huawei.com

authentication-scheme radius_huawei

radius-server radius_huawei

local-user user password cipher %@%@+mGiTT(l+D'R+#NqK/3+9BDR%@%@

local-user user privilege level 0

local-user admin password cipher %@%@}ogyO-ZQG%GSPiIRt}yUQLhH%@%@

local-user admin privilege level 13

local-user admin service-type telnet http

#

interface Vlanif99

ip address 10.66.99.2 255.255.255.0

#

interface Wlan-Ess50

port hybrid pvid vlan 167

undo port hybrid vlan 1

port hybrid untagged vlan 167

portal local-server enable

permit-domain name huawei.com

force-domain name huawei.com

port-isolate enable

分享至：