portal
- 格式:docx
- 大小:637.04 KB
- 文档页数:12
Validating file. Please wait...............Saved the current configuration to mainboard device successfully. Configuration is saved to device successfully.[H3C]dis cu#version 5.20, Release 3507P26#sysname H3C#domain default enable system#telnet server enable#oap management-ip 192.168.0.100 slot 1#password-recovery enable#vlan 1#vlan 34#vlan 200#vlan 999#vlan 4052#domain systemaccess-limit disablestate activeidle-cut disableself-service-url disable#user-group system#local-user adminpassword cipher $c$3$F6LNBGUy7zxhw4izofH0C2HA0k9VS1w4 authorization-attribute level 3service-type telnet#interface Bridge-Aggregation1port link-type trunkport trunk permit vlan all#interface NULL0#interface Vlan-interface34ip address 10.3.4.101 255.255.255.0#interface Vlan-interface4052ip address 192.168.209.101 255.255.255.0 #interface GigabitEthernet1/0/1port access vlan 200poe enable#interface GigabitEthernet1/0/2port access vlan 4052poe enable#interface GigabitEthernet1/0/3poe enable#interface GigabitEthernet1/0/4port access vlan 4052poe enable#interface GigabitEthernet1/0/5poe enable#interface GigabitEthernet1/0/6 description to-7600port link-type trunkport trunk permit vlan allpoe enable#interface GigabitEthernet1/0/7poe enable#interface GigabitEthernet1/0/8port access vlan 4052poe enable#interface GigabitEthernet1/0/9#interface GigabitEthernet1/0/10#interface GigabitEthernet1/0/11port link-type trunkport trunk permit vlan allport link-aggregation group 1#interface GigabitEthernet1/0/12port link-type trunkport trunk permit vlan allport link-aggregation group 1#nqa entry imclinktopologypleaseignore pingtype icmp-echodestination ip 192.168.100.254frequency 270000#ip route-static 0.0.0.0 0.0.0.0 192.168.209.1#snmp-agentsnmp-agent local-engineid 800063A20370F96D8118ABsnmp-agent community read h3csnmp-agent community write imcsnmp-agent community read publicsnmp-agent community write privatesnmp-agent sys-info version all#nqa schedule imclinktopologypleaseignore ping start-time now lifetime 630720000 #user-interface aux 0user-interface vty 0 4authentication-mode schemeuser-interface vty 5 15#return[H3C]<3024><3024><3024>dis cu#version 5.20, Release 3507P26#sysname 3024#domain default enable portal#telnet server enable#port-security enable#portal server portal ip 192.168.209.200 key cipher $c$3$hI0qpjiWBdD5Asw7cpDacwkbgk9ocgDm url http://192.168.209.200:80/portal server-type imcportal free-rule 0 source interface Bridge-Aggregation1 destination anyportal free-rule 1 source ip 211.140.13.0 mask 255.255.255.0 destination ip anyportal free-rule 2 source ip any destination ip 211.140.13.188 mask 255.255.255.255portal free-rule 3 source ip any destination ip 192.168.209.200 mask 255.255.255.255portal free-rule 4 source ip 192.168.209.200 mask 255.255.255.255 destination ip anyportal free-rule 5 source ip 192.168.209.100 mask 255.255.255.255 destination ip anyportal free-rule 6 source ip any destination ip 192.168.209.100 mask 255.255.255.255portal free-rule 8 source ip any destination ip 10.3.4.0 mask 255.255.255.0#oap management-ip 192.168.0.101 slot 0#password-recovery enable#vlan 1#vlan 34#vlan 999#vlan 4052#radius scheme portalprimary authentication 192.168.209.200primary accounting 192.168.209.200key authentication cipher $c$3$f3AMNfceeVWyUC1DW5FSsB/Li1rGjDDbkey accounting cipher $c$3$fEEGh7pf1vLtweIlSg62vWe/GCcQ1dbHuser-name-format without-domainnas-ip 10.3.4.100#domain portalauthentication portal radius-scheme portalauthorization portal radius-scheme portalaccounting portal radius-scheme portalaccess-limit disablestate activeidle-cut disableself-service-url disabledomain systemauthentication portal localauthorization portal localaccounting portal localaccess-limit disablestate activeidle-cut disableself-service-url disable#dhcp server ip-pool vlan999network 10.254.254.0 mask 255.255.255.0gateway-list 10.254.254.1#user-group systemgroup-attribute allow-guest#local-user adminpassword cipher $c$3$XQrqH02hvTAssns+VgofFByAQm6rJqHM authorization-attribute level 3service-type telnetservice-type weblocal-user h3cpassword cipher $c$3$aeu7k2p37APDUvXOu4U8EVfn2re4ug== service-type portal#wlan rrmdot11a mandatory-rate 6 12 24dot11a supported-rate 9 18 36 48 54dot11b mandatory-rate 1 2dot11b supported-rate 5.5 11dot11g mandatory-rate 1 2 5.5 11dot11g supported-rate 6 9 12 18 24 36 48 54#wlan service-template 1 clearssid H3C-WIFIbind WLAN-ESS 1service-template enable#interface Bridge-Aggregation1port link-type trunkport trunk permit vlan all#interface NULL0#interface Vlan-interface1#interface Vlan-interface34ip address 10.3.4.100 255.255.255.0 portal server portal method directportal domain portalportal nas-ip 10.3.4.100#interface Vlan-interface999ip address 10.254.254.1 255.255.255.0#interface Vlan-interface4052ip address 192.168.209.100 255.255.255.0 nat outbound 3000#interface GigabitEthernet1/0/1port link-type trunkport trunk permit vlan allport link-aggregation group 1#interface GigabitEthernet1/0/2port link-type trunkport trunk permit vlan allport link-aggregation group 1#interface WLAN-ESS1port access vlan 34#nqa entry imclinktopologypleaseignore ping type icmp-echodestination ip 10.3.4.253frequency 270000#wlan ap-group default_groupap 1ap 2#wlan ap 1 model WA2620i-AGN id 1serial-id autoradio 1service-template 1radio enableradio 2service-template 1radio enable#wlan ap 2 model WA2620i-AGN id 2serial-id 219801A0CMC144001080radio 1service-template 1radio enableradio 2service-template 1radio enable#wlan ipsmalformed-detect-policy defaultsignature deauth_flood signature-id 1signature broadcast_deauth_flood signature-id 2signature disassoc_flood signature-id 3signature broadcast_disassoc_flood signature-id 4signature eapol_logoff_flood signature-id 5signature eap_success_flood signature-id 6signature eap_failure_flood signature-id 7signature pspoll_flood signature-id 8signature cts_flood signature-id 9signature rts_flood signature-id 10signature addba_req_flood signature-id 11signature-policy defaultcountermeasure-policy defaultattack-detect-policy defaultvirtual-security-domain defaultattack-detect-policy defaultmalformed-detect-policy defaultsignature-policy defaultcountermeasure-policy default#ip route-static 0.0.0.0 0.0.0.0 192.168.209.1#snmp-agentsnmp-agent local-engineid 800063A2035CDD70F5DB7Fsnmp-agent community read h3csnmp-agent community write imcsnmp-agent sys-info version allsnmp-agent target-host trap address udp-domain 10.254.254.3 params securityname h3c snmp-agent target-host trap address udp-domain 192.168.209.200 params securityname h3c v2csnmp-agent target-host trap address udp-domain 10.254.254.3 params securityname imc snmp-agent target-host trap address udp-domain 192.168.209.200 params securityname imcv2csnmp-agent trap enable default-route#dhcp enable#nqa schedule imclinktopologypleaseignore ping start-time now lifetime 630720000 #user-interface con 0user-interface vty 0 4authentication-mode schemeuser privilege level 3#return<3024>添加业务vlan的控制器的ip地址添加控制器的ip接入设备添加接入策略添加接入服务添加接入用户添加业务vlan的ip网断添加控制器设备的Ip添加控制器的端口。