Why Cannot a STA Access the Internet Through WeChat Authentication?

The possible cause of a WeChat authentication failure is that wifi.weixin.qq.com is not added to the pre-authentication domain on the device. When loading the WeChat authentication page, a STA needs to communicate with wifi.weixin.qq.com. In this case, the network access permission is not temporarily permitted. Therefore, you need to permit the server. Otherwise, the WeChat authentication page is pushed slowly and the WeChat app cannot be started.

If no authentication-free rule is configured for wifi.weixin.qq.com, perform the following operations:

• Permit STA access by IP address.

  # Run the nslookup wifi.weixin.qq.com command in the CLI of a STA and find the IP address mapping wifi.weixin.qq.com.

  C:\>nslookup wifi.weixin.qq.com 
  Server: lg-ns2.huawei.com  //Complete host name of the DNS server
  Address:  10.72.55.103  /IP address of the DNS server
   
  Unauthorized response:
  Name:     forwardsh.qq.com  //formal host name of wifi.weixin.qq.com
  Address:  140.207.127.66  //IP address mapping wifi.weixin.qq.com
  Aliases:  wifi.weixin.qq.com  //Hostname alias of wifi.weixin.qq.com

  # Permit the IP address of the WeChat server on the device.

  <AC> system-view 
  [AC] free-rule-template name default_free_rule    //Enter the authentication-free rule profile view.
  [AC-free-rule-default_free_rule] free-rule 1 destination ip 140.207.127.66 mask 255.255.255.255  //Configure a free rule to permit authentication-free resources.
  [AC-free-rule-default_free_rule] quit

• Permit access to authentication-free resources by domain name

  <AC> system-view 
  [AC] acl 6000    //Create an ACL rule numbered from 6000 to 6031 and configure an authentication-free rule to permit access to the domain name. 
  [AC-acl-adv-6000] rule 1 permit ip destination passthrough-domain wifi.weixin.qq.com 
  [AC-acl-adv-6000] quit 
  [AC] free-rule-template name default_free_rule  //Enter the authentication-free rule profile view.
  [AC-free-rule-default_free_rule] free-rule acl 6000  //Configure an ACL to permit authentication-free resources.
  [AC-free-rule-default_free_rule] quit