AC的配置文件

#

sysname AC

#

http secure-server ssl-policy sslserver

http server enable

#

portal https-redirect enable

#

vlan batch 100 102

#

authentication-profile name wlan-net

portal-access-profile wlan-net

free-rule-template default

authentication-scheme wlan-net

radius-server wlan-net

#

portal web-authen-server https ssl-policy sslserver

#

dhcp enable

#

radius-server template wlan-net

radius-server shared-key cipher %^%#Oc6_BMCw#9gZ2@SMVtk!PAC6>Ou*eLW/"qLp+f#$%^%#

radius-server authentication 10.23.103.1 1812 source ip-address 10.23.102.2 weight 80

radius-attribute set NAS-Identifier huaweiac

#

pki realm abc

pki import-certificate ca realm abc pem filename rootca.pem

pki import-certificate local realm abc pkcs12 filename localcert.p12

pki import rsa-key-pair key1 pkcs12 localcert.p12 password Huawei@123

#

ssl policy sslserver type server

pki-realm abc

version tls1.0 tls1.1 tls1.2

ciphersuite rsa_aes_128_sha256 rsa_aes_256_sha256

# free-rule-template name default

free-rule 0 destination ip 10.0.0.1 mask 255.255.255.255

#

web-auth-server wlan-net

server-ip 10.23.103.1

url https://10.23.103.1/guest/huawei.php

source-ip 10.23.102.2

protocol http

#

portal-access-profile name wlan-net

web-auth-server wlan-net layer3

#

aaa

authentication-scheme wlan-net

authentication-mode radius

#

interface Vlanif100

ip address 10.23.100.1 255.255.255.0

dhcp select interface

#

interface Vlanif102

ip address 10.23.102.2 255.255.255.0

interface GigabitEthernet0/0/1

port link-type trunk

port trunk allow-pass vlan 100 102

#

interface LoopBack0

ip address 10.0.0.1 255.255.255.255

#

ip route-static 10.23.103.0 255.255.255.0 10.23.102.1

#

capwap source interface vlanif100

#

wlan

security-profile name wlan-net

ssid-profile name wlan-net

ssid wlan-net

vap-profile name wlan-net

service-vlan vlan-id 101

ssid-profile wlan-net

security-profile wlan-net

authentication-profile wlan-net

regulatory-domain-profile name default

ap-group name ap-group1

radio 0

vap-profile wlan-net wlan 1

radio 1

vap-profile wlan-net wlan 1

ap-id 0 ap-mac 60de-4476-e360

ap-id 0 type-id 35 ap-mac 60de-4476-e360 ap-sn 210235554710CB000042

ap-name area_1

ap-group ap-group1

#

return