How do i configure a Web Portal with the internal Radius server - WX3024

[raffa]

hey guys,

i tried to configure my wx3024 with the web portal --> but it failed!

My aim is to have 1 ssid with a passphrase key who is know by the employees and a second ssid who is only for the guest and some bring your own devices...

is it possible to configure this on my wx3024? my idea is that the guest can get a randon password for about 5 hours and after that the user will put off...

can someone help me out or give me an hint or tip?

i read the manual and tried different things..

thanks in advance

rafael

[raffa]

okay guys,,

made a seconde vlan and associate a dhcp for this vlan..it works but i doesn't redirect me to the webportal! whats wrong?
thanks in advance for any help! cheers raffa

#
version 5.20, Release 3111P12
#
sysname WX_3024
#
ftp server enable
#
domain default enable system
#
ip host DNS_1_extern 164.128.36.36
ip host DNS_2_extern 164.128.36.37
#
telnet server enable
#
port-security enable
#
dot1x authentication-method eap
#
portal server webportal ip 192.168.223.10 url http://192.168.223.10/portal/logon.htm
portal free-rule 1 source any destination ip 164.128.36.37 mask 255.255.255.255
portal free-rule 2 source any destination ip 164.128.36.36 mask 255.255.255.255
portal server banner BYOD@SCHOOL
portal local-server http
portal local-server bind ssid byod@school file byod.zip
portal trap server-down
#
oap management-ip 192.168.222.2 slot 0
#
wlan country-code CH
#
wlan auto-ap enable
#
vlan 1
description student@work
#
vlan 100
description BYOD
#
radius scheme system
#
domain byod
authentication portal local
authorization portal local
accounting portal local
access-limit disable
state active
idle-cut disable
self-service-url disable
accounting optional
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
dhcp server ip-pool 100
network 192.168.223.0 mask 255.255.255.0
gateway-list 192.168.222.1
dns-list 164.128.36.36 164.128.36.37
#
user-group system
#
local-user admin
password cipher N27ET`%QI^-P2P_[0FCJVQ!!
authorization-attribute level 3
service-type ssh telnet terminal
service-type ftp
local-user byod
password simple byod
authorization-attribute vlan 100
service-type portal
#
wlan rrm
dot11a mandatory-rate 6 12 24
dot11a supported-rate 9 18 36 48 54
dot11b mandatory-rate 1 2
dot11b supported-rate 5.5 11
dot11g mandatory-rate 1 2 5.5 11
dot11g supported-rate 6 9 12 18 24 36 48 54
#
wlan radio-policy en_solothurn
beacon-interval 200
dtim 4
rts-threshold 2300
fragment-threshold 2200
short-retry threshold 6
max-rx-duration 500
#
wlan service-template 1 crypto
ssid Stadtschulen
bind WLAN-ESS 1
cipher-suite tkip
cipher-suite ccmp
security-ie rsn
service-template enable
#
wlan service-template 1024 clear
#
wlan service-template 2 clear
ssid byod@school
bind WLAN-ESS 2
service-template enable
#
ssl server-policy ssl
#
eap-profile eap
method md5
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.222.3 255.255.255.0
#
interface Vlan-interface100
ip address 192.168.223.2 255.255.255.0
portal server webportal method direct
portal domain byod
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan all
stp disable
#
interface WLAN-ESS1
port-security port-mode psk
port-security tx-key-type 11key
port-security preshared-key pass-phrase cipher HW990PFVLLwkCacx/Xt0xbUhpbcwbx2RRjkRUE4hjr2z63mZD5BNpkbKnDpFnwhs3D2ZWG2oleIBITAb49+O5A==
#
interface WLAN-ESS2
port link-type hybrid
port hybrid vlan 1 100 untagged
port hybrid pvid vlan 100
#
wlan ap ap_001 model WA2610E-AGN id 1
serial-id 210235A42LB10C000009
radio 1
service-template 1
service-template 2
radio enable
#
wlan ap ap_002 model WA2610E-AGN id 2
serial-id 210235A42LB10C000157
radio 1
service-template 1
service-template 2
radio enable
#
wlan ap ap_003 model WA2610E-AGN id 3
serial-id 210235A42LB10C000160
radio 1
service-template 1
service-template 2
radio enable
#
wlan ap ap_004 model WA2610E-AGN id 4
serial-id 210235A42LB10C000286
radio 1
service-template 1
service-template 2
radio enable
#
wlan ap ap_005 model WA2610E-AGN id 5
serial-id 210235A42LB10C000262
radio 1
service-template 1
service-template 2
radio enable
#
wlan ap ap_006 model WA2610E-AGN id 6
serial-id 210235A42LB10C000154
radio 1
service-template 1
service-template 2
radio enable
#
wlan ap ap_007 model WA2610E-AGN id 7
serial-id 210235A42LB10C000159
radio 1
service-template 1
service-template 2
radio enable
#
wlan ap ap_008 model WA2610E-AGN id 8
serial-id 210235A42LB10C000210
radio 1
service-template 1
service-template 2
radio enable
#
wlan ap ap_009 model WA2610E-AGN id 9
serial-id 210235A42LB10C000055
radio 1
service-template 1
service-template 2
radio enable
#
wlan ap ap_010 model WA2610E-AGN id 10
serial-id 210235A42LB10C000098
radio 1
service-template 1
service-template 2
radio enable
#
wlan ids
dynamic-blacklist enable
attack-detection enable all
#
ip route-static 0.0.0.0 0.0.0.0 192.168.222.1
#
snmp-agent
snmp-agent local-engineid 800063A2033CE5A6CFE245
snmp-agent community read public
snmp-agent community write Stadtschulen
snmp-agent sys-info contact Rafael Dudar; Regio-Energie-Solothurn
snmp-agent sys-info location Solothurn, Swiss
snmp-agent sys-info version v1 v2c
#
dhcp server forbidden-ip 192.168.223.1 192.168.223.50
#
dhcp enable
#
ntp-service unicast-server 194.88.212.205 priority
#
ssh server enable
sftp server enable
#
load xml-configuration
#
user-interface aux 0
authentication-mode scheme
user-interface vty 0 4
authentication-mode scheme
user privilege level 3
#
return
[WX_3024]