Alaxala AX2500S, Troubleshooting Manual

Page: 87 / 136

3 Troubleshooting Functional Failures During Operation
61
3.8.2 Communication failures occurring when Web authentication is used
If a failure occurs when Web authentication is used, isolate the cause of the problem
according to the failure analysis method described in the following table.
Table 3-23 Failure analysis method for Web authentication
No. Items to check and commands Action
1 Check whether the login page
appears on the terminal.

If the login page and logout page do not appear, go to No. 2.

If the login page appears in local authentication mode, go to
No. 5.

If the login page appears in RADIUS authentication mode, go
to No. 7.
2 Check whether the URLs specified
for login and logout are correct.

If incorrect URLs are specified for login or logout, use the
correct URLs.

If the Web authentication IP address has been set, make
sure the IP address for the VLAN (dynamic or fixed VLAN)
for which Web authentication is to be performed has been
set by the
ip address
configuration command.

If fixed VLAN mode or dynamic VLAN mode is set, go to No.
3.

For other cases, go to No. 9.
3 Check the setting of the Web
authentication IP address or URL
redirection in fixed VLAN mode and
dynamic VLAN mode.

Check whether the Web authentication IP address has been
set in the
web-authentication ip address
configuration command or URL redirection has been
enabled by the
web-authentication redirect enable
configuration command.

If URL redirection is enabled, make sure the IP address is set
for a VLAN that is authenticated in fixed VLAN mode or
dynamic VLAN mode by using the
ip address
configuration command.

For other cases, go to No. 4.
4 Check the setting of the
authentication IPv4 access list.

If an unauthenticated terminal sends certain types of packets
to destinations outside the Switch, make sure an
authentication IPv4 access list is set.
When both a standard access list and an authentication IPv4
access list are set for an authenticating port, make sure the
filtering conditions in the authentication IPv4 access list are
also set in the standard access list.

Make sure a filtering condition for discarding IP packets
(such as
deny ip
) is not set in the standard access list or
authentication IPv4 access list for the authenticating port.

Make sure
any
is not set for the destination IP address in the
filtering condition in the authentication IPv4 access list.

For other cases, go to No. 10.
5 Use the
show
web-authentication user
operation command to check
whether the user ID is registered.

If the user ID is not registered, use the
set
web-authentication user
operation command to
register the user ID, password, and VLAN ID. After the
registration, use the
commit web-authentication
operation command to apply the information to the
operation.

For other cases, go to No. 6.