Alaxala AX2500S, Руководство по устранению неисправностей

Страница: 91 / 136

3 Troubleshooting Functional Failures During Operation
65
3.8.3 Communication failures occurring when MAC-based authentication is
used
If communication is not possible when MAC-based authentication is used, isolate the
cause of the problem according to the failure analysis method described in the following
table.
Table 3-25 Failure analysis method when MAC-based authentication is used
No. Items to check and commands Action
1 Check whether communication with
the terminal is possible.

If authentication in local authentication mode is not possible,
go to No. 2.

If authentication in RADIUS authentication mode is not
possible, go to No. 3.

For other cases, go to No. 6.
2 Use the
show
mac-authentication
mac-address
operation command
to make sure the MAC address and
VLAN ID are registered.

If the MAC address is not registered, use the
set
mac-authentication mac-address
operation
command to register the MAC address and VLAN ID. After
registration, use the
commit mac-authentication
operation command to apply the information to the
operation.
[Fixed VLAN mode]

If the
mac-authentication vlan-check
configuration
command is set, make sure the MAC address and the VLAN
ID to which the terminal to be authenticated belongs are
registered.
[Dynamic VLAN mode]

Make sure the MAC address and the post-authentication
VLAN ID are registered.

For cases other than above, if fixed VLAN mode or dynamic
VLAN mode is used, go to No. 5.

For other cases, go to No. 6.
3 Check whether the MAC address is
registered on the RADIUS server.

If the MAC address is not registered as the user ID of the
RADIUS server, register the MAC address on the RADIUS
server.

If the MAC address is registered for the user ID and
password, check the value of the MAC address.
Also check whether the MAC address format matches the
format set in the
mac-authentication id-format
configuration command.

If a character string is specified for the password, check
whether it matches the character string set in the
mac-authentication password
configuration
command.
[Fixed VLAN mode]

Check whether the RADIUS server's VLAN ID indicated by
NAS-Identifier
matches the VLAN ID to which the
terminal to be authenticated belongs.

If the
mac-authentication vlan-check
configuration
command is set, check whether the character string
registered as the user ID matches the combination of VLAN
ID and separator characters specified in that command.