Upper layer troubleshooting
3. If the server is connected in a network, check if the switch has a route configured
Avaya Secure Network Access troubleshooting
Avaya Secure Network Access (ASNA) Release 1.5 provides security policy compliance on
all endpoint devices. ASNA has the following network access levels:
• Green access, which provides full (or with certain restriction per policy) access based on
user groups.
• Yellow access, which allows traffic only to remedial networks
• Red access, which restricts access to authentication, DHCP and DNS traffic to the Secure
Network Access Switch (SNAS), DHCP and DNS servers.
• VoIP access, which restricts VoIP traffic to VoIP controllers and authenticated IP phone
peers.
For more information about ASNA, see Avaya Ethernet Routing Switch 8800/8600 Security,
NN46205-601.
Avaya Secure Network Access troubleshooting navigation
•
Monitoring DHCP requests
•
Issue: client unable to reach the DHCP server
•
Issue: SSH session is not established between edge switch and SNAS server
page 463
•
Issue: ASNA connection not established after HA failover
•
Issue: TG page does not open when client is in Red VLAN
•
Issue: page is not automatically redirected to SNAS login page
462
Troubleshooting
show port info interface port <slot/port>
OR
using the following ACLI command
show interface <port-type> interface <slot/port>
to the server network using the following CLI command:
show ip route info
OR
using the following ACLI command
show ip route
Comments? infodev@avaya.com
on page 463
on page 463
on
on page 464
on page 464
on page 465
July 2013