AC6005做内置portal匿名登录

<AC6005>system-view
[AC6005]interface loopback 0
[AC6005-LoopBack0]ip address 10.1.1.1 32
[AC6005-LoopBack0]quit
[AC6005]http secure-server ssl-policy default_policy
[AC6005]portal local-server ip 10.1.1.1
[AC6005]portal local-server https ssl-policy default_policy port 1025
[AC6005]portal local-server default-language chinese
[AC6005]portal https-redirect enable

[AC6005]aaa
[AC6005-aaa] authentication-scheme portal
[AC6005-aaa-authen-portal]  authentication-mode none
[AC6005-aaa-authen-portal] authorization-scheme portal
[AC6005-aaa-author-portal]  authorization-mode none
[AC6005-aaa-author-portal] service-scheme portal
[AC6005-aaa-service-portal]  dns 218.2.135.1
[AC6005-aaa-service-portal]  dns 114.114.114.114 secondary
[AC6005-aaa-service-portal]quit
[AC6005-aaa]quit
[AC6005]ssl policy ssl-wechat type client
[AC6005-ssl-policy-ssl-wechat] pki-realm pki-wechat
[AC6005-ssl-policy-ssl-wechat] undo server-verify enable
[AC6005-ssl-policy-ssl-wechat]ssl policy wechat_ssl_policy type client
[AC6005-ssl-policy-wechat_ssl_policy] pki-realm pki-wechat
[AC6005-ssl-policy-wechat_ssl_policy] undo server-verify enable
[AC6005-ssl-policy-wechat_ssl_policy]quit
[AC6005]portal-access-profile name portal
[AC6005-portal-access-profile-portal] portal local-server enable
[AC6005-portal-access-profile-portal] portal local-server anonymous
[AC6005-portal-access-profile-portal]quit
[AC6005]free-rule-template name default_free_rule
[AC6005-free-rule-default_free_rule] free-rule 1 destination ip 10.1.1.1 mask 255.255.255.255
[AC6005-free-rule-default_free_rule]quit
[AC6005]authentication-profile name portal
[AC6005-authentication-profile-portal] portal-access-profile portal
[AC6005-authentication-profile-portal] free-rule-template portal                
[AC6005-authentication-profile-portal] authentication-scheme portal
[AC6005-authentication-profile-portal] accounting-scheme portal
[AC6005-authentication-profile-portal] authorization-scheme portal
[AC6005-authentication-profile-portal] authorize service-scheme portal
[AC6005-authentication-profile-portal]quit
[AC6005]wlan
[AC6005-wlan-view]vap-profile name vap
[AC6005-wlan-vap-prof-vap]forward-mode tunnel
[AC6005-wlan-vap-prof-vap]authentication-profile portal

猜你喜欢

转载自blog.51cto.com/maguangjie/2316764