Alaxala AX2500S, Troubleshooting Manual

Page: 90 / 136

3 Troubleshooting Functional Failures During Operation
64
Table 3-24 Checking the configuration of Web authentication
No. Items to check and commands Action
1 Web authentication configuration Make sure the following configuration commands have been set
correctly.
[Common to Web authentication]

aaa authentication web-authentication default
group radius

web-authentication auto-logout

web-authentication max-timer

web-authentication system-auth-control
[Fixed VLAN mode]

web-authentication port

authentication arp-relay

authentication ip access-group

web-authentication redirect enable

web-authentication redirect-mode
[Dynamic VLAN mode]

web-authentication port

authentication arp-relay

authentication ip access-group

web-authentication redirect enable

web-authentication redirect-mode
2 IP addresses set for the VLAN
interfaces [Fixed VLAN mode]
Make sure the IP address for the VLAN interface is set correctly.
[Dynamic VLAN mode]
Make sure the IP addresses for the following VLAN interfaces are
set correctly:

Pre-authentication VLAN

Post-authentication VLAN
3 DHCP server setting
When the DHCP server is used, see 3.6.2 Communication failures
occurring when the DHCP server is used .
4 Filtering setting Certain packets might have been discarded by filtering or packets
might have been discarded by the QoS control shaper. Make sure
that the setting conditions for filtering and QoS control in the
configuration are correct, and that the shaper is used
appropriately in the system configuration. For details about the
procedure, see 3.15.1 Checking the filtering and QoS control
configuration information .
5 Setting of the authentication IPv4
access list Make sure the filtering conditions required for communication from
unauthenticated terminals to destinations outside the Switch have
been set correctly by using the
authentication ip
access-group
and
ip access-list extended
configuration
commands.
6 Setting of ARP packet forwarding Make sure the
authentication arp-relay
configuration
command has been set correctly so that unauthenticated
terminals can send ARP packets to devices outside the Switch.