版本信息:
V200R008C00SPC500
组网概述:
内网环境配置,portal服务器和radius服务器在同一网段,认证点在S5720上
组网拓扑图:
配置脚本:
vlan batch 10 20
#
radius-server template rd1
radius-server shared-key cipher %^%#Z@zO.2xp4(+yc`):z!%)C8A;65zdKB'Hby;eNcU-%^%#
radius-server authentication 192.168.0.26 1812 weight 80
radius-server accounting 192.168.0.26 1813 weight 80
radius-server retransmit 2
#
web-auth-server abc
server-ip 192.168.0.155
port 50100
shared-key cipher %^%#=wsVO5qaZ1XUO(:M#[JAw/D<*]c3T~('%|Wi6|=$%^%#
url http://192.168.0.155:8088
server-detect action log
#
aaa
authentication-scheme abc
authentication-mode radius
accounting-scheme abc
accounting-mode radius
accounting start-fail online
domain daxia
authentication-scheme abc
accounting-scheme abc
radius-server rd1
local-user admin password irreversible-cipher %^%#!3ZsEK~6qA6dw]:G80L"lP+!9!'Qa%cMzDU)mKhB["(`EOqge:rKbY<<qgLB%^%#
local-user admin service-type http
#
interface Vlanif1
ip address 192.168.0.33 255.255.255.0
web-auth-server abc direct
#
interface GigabitEthernet0/0/5
port link-type access
port default vlan 1
#
portal max-user 100
portal timer offline-detect 500
portal free-rule 0 destination ip 192.168.0.155 mask 255.255.255.255
portal free-rule 1 destination ip 192.168.0.26 mask 255.255.255.255
portal free-rule 2 destination ip 192.168.0.1 mask 255.255.255.255
故障现象:
用户可以登录portal页面,并且输入用户名密码,但认证完成后无法上网
