OSSH免费版华为Portal系统支持华为Portal协议，能够跟市面上支持华为协议的设备进行对接，方便的实现Web Portal认证。下面我们介绍华为主流6605系列AC同OSSH免费版华为Portal的对接示例，仅供大家参考。
网络拓扑如下：
配置说明：
1、将无线认证用户及设备划分到VLAN2014
#
vlan 2014
description user_vlan
#
2、配置Radius认证模板
#
radius-server templateradius_huawei
radius-servershared-key cipher %@%@,%+K=Sl9NOmxy2@J~"X//97v%@%@
radius-serverauthentication 192.168.10.3 1812 weight 80
radius-serveraccounting 192.168.10.3 1813 weight 80
undo radius-serveruser-name domain-included
#
#
url-template nameurlTemplate_0
#
3、配置Portal认证对接的参数
#
web-auth-serverportal
server-ip192.168.10.3
port 50100
shared-key cipher%@%@qfU0XjxGk-{_|i"4x;<,/v~S%@%@
urlhttp: //192.168.10.3:8080/login.jsp
url-templateurlTemplate_0
user-sync
#
4、配置无线认证用户的地址池、网关及DNS
#
ip pool wifi_user
gateway-list192.168.10.1
network 192.168.10.0 mask255.255.255.0
excluded-ip-address192.168.10.1 192.168.10.40
lease day 0 hour 1minute 0
dns-list 8.8.8.8
#
5、配置AAA模板
#
aaa
authentication-scheme default
authentication-scheme radius_huawei
authentication-mode radius
authorization-scheme default
accounting-scheme default
accounting-scheme radius_huawei
accounting-mode radius
domain default
domain default_admin
domain huawei.com
authentication-scheme radius_huawei
accounting-scheme radius_huawei
radius-server radius_huawei
local-user admin password cipher%@%@lA9^Vm7sN452P)V;[5<Fcc>(%@%@
local-user admin privilege level 15
local-user admin service-type telnet ssh ftpweb http
#
6、配置VLAN2014的地址以及在该Vlan中启用Portal认证
#
interfaceVlanif2014
ip address 192.168.10.2255.255.255.0
web-auth-serverportal direct
dhcp select global
#
7、其他配置如下：
#
interfaceGigabitEthernet0/0/1
port link-typeaccess
port default vlan2014
#
interfaceGigabitEthernet0/0/2
port link-typeaccess
port default vlan2014
#
#
interfaceGigabitEthernet0/0/24
port link-typetrunk
port trunkallow-pass vlan 2014 to 2015
#
interfaceXGigabitEthernet0/0/1
#
interfaceXGigabitEthernet0/0/2
#
interface Wlan-Ess0
port hybrid pvidvlan 2014
undo port hybridvlan 1
port hybriduntagged vlan 2014
permit-domain namehuawei.com
force-domain namehuawei.com
#
interface Wlan-Ess1
descriptionno_portal
port hybrid pvidvlan 2014
undo port hybridvlan 1
port hybriduntagged vlan 2014
#
interface NULL0
#
ip route-static0.0.0.0 0.0.0.0 192.168.10.1
#
以上即为OSSH免费版华为Portal系统与华为AC6605对接的示例
