Motorola RFS Series, System Reference Manual

Page: 566 / 590

C-10 Motorola RF Switch System Reference Guide
• Add a Radius client in AAA context
• Ensure that key password in AAA/EAP context is set to the key used to generate imported certificates
• DO NOT forget to SAVE!
C.3.2.2 Radius Server does not reply to my requests
Ensure the following have been attempted:
• Add a Radius client in Radius server configuration with the Switch’s VLAN interface, IP address and
subnet, which have been marked as management
• Save the current configuration
• Ensure that the WLAN settings haves been set to use the on-board/local Radius server by entering the
local IP address or the switch management VLAN IP address
C.3.2.3 Radius Server is rejecting the user
Ensure the following have been attempted:
• Verify a SAVE was done after adding this user.
• Is the user present in a group?
• If yes, check if the WLAN being accessed is allowed on the group
• Check if time of access restrictions permit the user.
C.3.2.4 Time of Restriction configured does not work
Ensure that date on the system matches your time
C.3.2.5 Authentication fails at exchange of certificates
Ensure the following have been attempted:
• Verify that valid certificates were imported.
• If the Supplicant has "Validate Server Certificate" option set, then make sure that the right certificates
are installed on the MU.
C.3.2.6 When using another RFS7000 (switch 2) as RADIUS server, access is rejected
Ensure the following have been attempted:
• Make sure that the user, group and access policies are properly defined on switch 2
• Add a AAA client on switch 2 with a VLAN interface IP address which can communicate with switch 1
• Save the current configuration
C.3.2.7 Authentication using LDAP fails
Ensure the following have been attempted:
• Is LDAP server reachable?
• Have all LDAP attributes been configured properly?
• Dbtype must be set to LDAP in AAA configuration
• Save the current configuration