Alaxala AX2500S, Руководство по устранению неисправностей

Страница: 92 / 136

3 Troubleshooting Functional Failures During Operation
66
No. Items to check and commands Action
[Dynamic VLAN mode]
Correct the configuration so that the VLAN ID specified for
the
Tunnel-Private-Group-ID
attribute of the
RADIUS
attributes for the RADIUS server matches the VLAN ID of the
authenticating port
#1
.

If a VLAN name has been registered on the RADIUS server,
make sure the target VLAN name matches the VLAN name
specified in the
name
#2
configuration command.

For other cases, go to No. 4.
4 Use the
show
mac-authentication
statistics
operation command
to check the communication status
with the RADIUS server.

If the value displayed for
TxTotal
under
[RADIUS
frames]
is
0
, check whether the following configurations
are specified correctly:
aaa authentication mac-authentication default
mac-authentication radius-server host
or
radius-server host

If fixed VLAN mode or dynamic VLAN mode is set, go to No.
5.

For other cases, go to No. 6.
5 Check the setting of the
authentication IPv4 access list.

If an unauthenticated terminal sends certain types of packets
to destinations outside the Switch, make sure an
authentication IPv4 access list is set.
When both a standard access list and an authentication IPv4
access list are set for an authenticating port, make sure the
filtering conditions in the authentication IPv4 access list are
also set in the standard access list.

Make sure
any
is not set for the destination IP address in the
filtering condition in the authentication IPv4 access list.

For other cases, go to No. 6.
6 Use the
show
mac-authentication
statistics
operation command
to check whether the MAC-based
authentication statistics are
displayed.

If the MAC-based authentication statistics are not displayed,
go to No. 7.

For other cases, go to No. 8.
7 Check whether the
mac-authentication
system-auth-control
configuration command has been
set.

If the
mac-authentication system-auth-control
configuration command has not been set, set the command.

For other cases, go to No. 8.
8 Execute the
show
mac-authentication logging
operation command and check for
operation problems.
If the following operation log data is displayed with operation log
type
LOGIN
, authentication has failed:

Login failed :
xxxxxxxxxxx
Check the operation log, and review the settings of the
RADIUS server, internal MAC authentication DB, and
configuration.
For details about the operation log, see the manual Operation
Command Reference .