HP 10500 series, Руководство по настройке безопасности

Страница: 80 / 596

66
RADIUS packet delivery failure
Symptom
RADIUS packets cannot reach the RADIUS server.
Analysis
Possible reasons include:
•
A communication failure exists between the NAS and the RADIUS server.
•
The NAS is not configured with the IP address of the RADIUS server.
•
The authentication and accounting UDP ports configured on the NAS are incorrect.
•
The RADIUS server's authentication and accounting port numbers are being used by other
applications.
Solution
To resolve the problem:
1. Check the following items:
{
The link between the NAS and the RADIUS server work well at both the physical and data
link layers.
{
The IP address of the RADIUS server is correctly configured on the NAS.
{
The authentication and accounting UDP port numbers configured on the NAS are the same
as those of the RADIUS server.
{
The RADIUS server's authentication and accounting port numbers are available.
2. If the problem persists, contact Hewlett Packard Enterprise Support.
RADIUS accounting error
Symptom
A user is authenticated and authorized, but accounting for the user is not normal.
Analysis
The accounting server configuration on the NAS is not correct. Possible reasons include:
•
The accounting port number configured on the NAS is incorrect.
•
The accounting server IP address configured on the NAS is incorrect. For example, the NAS is
configured to use a single server to provide authentication, authorization, and accounting
services, but in fact the services are provided by different servers.
Solution
To resolve the problem:
1. Check the following items:
{
The accounting port number is correctly configured.
{
The accounting server IP address is correctly configured on the NAS.
2. If the problem persists, contact Hewlett Packard Enterprise Support.
Troubleshooting HWTACACS
Similar to RADIUS troubleshooting. See " Troubleshooting RADIUS ."