Key Configuration Check

Check whether the built-in Portal server is enabled, including whether the server is enabled, and whether the IP address, protocol, and port of the server are correct.

[HUAWEI] display portal local-server
Portal local-server config       :
 server status                   : enable
 Heartbeat-check status          : disable
 server ip                       : 200.1.1.1
 authentication method           : chap
 protocol                        : https
 https ssl-policy                : default_policy
 server max-user                 : 1024
 server port                     : 2000
 session-timeout                 : 8(h)

If the built-in Portal server function is disabled, use either of the following two methods to enable the function:

• When the built-in Portal server uses HTTP:

  #
  portal local-server ip 200.1.1.1
  portal local-server http port 2000
  #

• When the built-in Portal server uses HTTPS:

  #
  portal local-server ip 200.1.1.1
  portal local-server https ssl-policy default_policy port 2000
  #

Find the corresponding VAP profile based on the SSID, and check the configurations of the VAP profile, including the configuration of the authentication profile.

1. Run the display vap-profile all command to check all VAP profiles and find the corresponding VAP profile based on the SSID.

   [HUAWEI] display vap-profile all
   FMode   : Forward mode
   STA U/D : Rate limit client up/down
   VAP U/D : Rate limit VAP up/down
   BR2G/5G : Beacon 2.4G/5G rate
   ---------------------------------------------------------------
   Name              FMode    Type     VLAN      AuthType   STA U/D(Kbps)  VAP U/D(Kbps)  BR2G/5G(Mbps)  Reference  SSID
   ---------------------------------------------------------------
   default           direct   service  VLAN 1    Open         -/-          -/-             1/6            0         HUAWEI-WLAN
   vap_localportal tunnel   service  VLAN 200  Open+Portal  -/-          -/-             1/6            3         localportal_test
   ---------------------------------------------------------------
   Total: 2

2. Check the configuration of the VAP profile, and find the authentication profile bound to the VAP profile.

   [HUAWEI] wlan
   [HUAWEI-wlan-view] vap-profile name vap_localportal
   [HUAWEI-wlan-vap-prof-vap_localportal]display this
   #
    forward-mode tunnel
    service-vlan vlan-id 200
    ssid-profile localportal
    authentication-profile authen_localportal
   #

3. Check the configuration of the authentication profile. It must have a Portal access profile bound.

   [HUAWEI] authentication-profile name authen_localportal
   [HUAWEI-authentication-profile-authen_localportal] display this
   #
   authentication-profile name authendot1x
    portal-access-profile access_localportal
    access-domain domain_test
   #

4. Check the configuration of the Portal access profile. The built-in Portal server must be enabled.

   [HUAWEI] portal-access-profile name access_localportal
   [HUAWEI-portal-access-profile-access_localportal] display this
   #
   portal-access-profile name access_localportal
    portal local-server enable
   #