ac 无线二维码认证服务器,无线V7 AC配合Cisco ISE认证服务器实现portal认证配置

配置AC：

#

dhcp server ip-pool 12

gateway-list 191.12.1.54

network 191.12.0.0 mask 255.255.0.0

#

wlan service-template ise

ssid H3C_ise

vlan 12

portal enable method direct

portal domain ise

portal apply web-server ise

service-template enable

#

interface NULL0

#

interface Vlan-interface1

ip address 192.168.0.100 255.255.255.0

#

interface Vlan-interface12

ip address 191.12.1.54 255.255.0.0

#

interface Vlan-interface1200

ip address 191.120.1.54 255.255.0.0

#

radius scheme ise

primary authentication 8.1.1.19 key cipher

$c$3$Wcl9eNw215DB2uk6ucQKsBJMQXif7AM=

primary accounting 8.1.1.19 key cipher

$c$3$9gdSv7PGosMXJkTDMQMm1sfvArovU6o=

user-name-format without-domain

nas-ip 191.120.1.54

#

domain ise

authentication default radius-scheme ise

authorization default radius-scheme ise

accounting default radius-scheme ise

#

portal host-check enable

portal free-rule 10000 destination ip

191.12.1.54 255.255.255.255

#

portal web-server ise

url https://8.1.1.19:8443/portal/PortalSetup.action?portal=f0ae43f0-7159-11e7-a355-005056aba474

server-type ise

#

portal

local-web-server http

default-logon-page ise_h3c.zip

#

portal

local-web-server https

default-logon-page ise_h3c.zip

#

ip http enable

ip https enable

#

wlan ap-group default-group

vlan 1

#

wlan ap ax3 model WA5530

serial-id 219801A0YF9172G02233

vlan 1

radio 1

channel 36

radio enable

service-template ise