Can the Portal configuration on WLAN-ESS interfaces be modified in batches on the AC

2

No. ACs and Fat APs do not support this function.

Other related questions:
WLAN-ESS and WLAN-BSS interface
Differences between ESS and BSS - Basic service set (BSS) is the basic service unit of WLAN. Typically, BSS consists of one AP and several STAs. - Extended service set (ESS) is a group of BSSs that share the same SSID. ESS solves the limited coverage problem caused by BSS. In most cases, BSS is used on Fat APs, while ESS on ACs. For wireless air interfaces, the service VLAN is typically set to PVID and untag VLAN. For example: int {wlan-bss|wlan-ess} 0 port hybrid pvid 10 port hybrid untag vlan 10 To change information such as the VLAN and domain for a WLAN-ESS or WLAN-BSS interface, you must unbind the service set from the AP and then the WLAN-BSS and WLAN-ESS interfaces from the service set.

Can free IP subnets be configured for Portal authentication on the AC
Users cannot access the network before passing Portal authentication. You can set authentication-free rules for Portal authentication users so that the users can access specified network resources without being authenticated or when the users fail the authentication. Authentication-free rules based on IP addresses are called free IP subnets.
Enter the system view, and configure a free IP subnet to allow packets from any source IP addresses to access network segment 10.1.1.0/24.
V200R005:
<AC6605> system-view
[AC6605] portal free-rule 1 destination ip 10.1.1.1 24 source ip any
V200R006:
<AC6605> system-view
[AC6605] free-rule-template name f1
[AC6605-free-rule-f1] free-rule 1 destination ip 10.1.1.1 mask 24 source ip any

How to configure interfaces in a batch
To perform the same configurations on multiple interfaces, add these interfaces to a port group to batch configure them. This can reduce the configuration workload.

Can authentication-free domain names be configured for Portal authentication on the AC
From V200R006, ACs support authentication-free domain names for Portal authentication. Network access rights of users can be configured through ACLs. If the administrator wants to control a user's access to a domain name, configure the user's access rights to the IP address corresponding to the domain name. If the domain name corresponds to multiple IP addresses, maintenance of the administrator may be complicated. In this case, configure a global domain name. Access rights control can then be implemented directly through the global domain name in the ACL. 1. Enter the system view, and configure a global domain name. system-view [AC6605] passthrough-domain name weixin.com id 1 2. Create a user ACL, and allow access to the global domain name in the ACL. system-view [AC6605] acl number 6001 [AC6605-acl-adv-6001] rule permit ip source user-group name user1

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top