NEC IP8800/S2400 Series, Troubleshooting Manual

Page: 158 / 250

3.
Troubleshooting Functional Failures in Operation
96
For the configuration relating to the Web authentication accounting, check the following.
Table 3-52: Web Authentication Failure Analysis Method
5 Check to see the access filter setting for
authentication. When using IP8800/S3600 or IP8800/S2400 model in static VLAN
mode, confirm that the filter condition permits pre-authenticated
terminals to send packets out of the system by the configuration
command
authentication ip access-group or ip
access-list extended
.
6 Check to see the ARP relay setting. When using IP8800/S3600 or IP8800/S2400 model in static VLAN
mode, confirm that the setting permits pre-authenticated terminals to
send packets out of the system by the configuration command
authentication arp-relay .
No. Troubleshooting Steps and Command Action
1 Check to see if account has been recorded after
authentication.
• When authentication status is not displayed by the
show
mac-authentication login
command, see " Table
3-50: Failure Analysis Method for Web Authentication ."
• If authentication status is not recorded in the accounting server, go to
No.2.
• If authentication status is not recorded in the syslog server, go to
No.3.
2 Check to see communication status with accounting
server by the
show web-authentication
statistics
command.
•
When "TxTotal" of [Account frames] indicates 0, check to see if the
setting by configuration command
aaa accounting
web-authentication default start-stop group
radius
or
radius-server host
is correct.
• Otherwise, check the configurations for Web authentication.
3 Check to see the settings of syslog server. Confirm the settings by the following commands are correct.
• Confirm that syslog server is configured by the logging host
command.
• Confirm that "aut" is set as an event kind by the
logging
event-kind command.
• Confirm that the logging is enabled by the
web-authentication logging enable
command.
No. Check Point Troubleshooting Steps