Operation Manual - Security
Quidway S3000 Series Ethernet Switches
Chapter 2 AAA and RADIUS Protocol Configuration
2-20
z
The encryption keys of RADIUS server and NAS may be different. Please check
carefully and make sure that they are identical.
z
There might be some communication fault between NAS and RADIUS server,
which can be discovered through pinging RADIUS from NAS. So please ensure
the normal communication between NAS and RADIUS.
z
Fault two: RADIUS packet cannot be transmitted to RADIUS server.
Troubleshooting:
z
The communication lines (on physical layer or link layer) connecting NAS and
RADIUS server may not work well. So please ensure the lines work well.
z
The IP address of the corresponding RADIUS server may not have been set on
NAS. Please set a proper IP address for RADIUS server.
z
UDP ports of authentication/authorization and accounting services may not be set
properly. So make sure they are consistent with the ports provided by RADIUS
server.
z
Fault three: After being authenticated and authorized, the user cannot send
charging bill to the RADIUS server.
Troubleshooting:
z
The accounting port number may be set improperly. Please set a proper number.
z
The accounting service and authentication/authorization service are provided on
different servers, but NAS requires the services to be provided on one server (by
specifying the same IP address). So please make sure the settings of servers are
consistent with the actual conditions.
