Communication Failure On Using Web Authentication - NEC IP8800/S2400 Series Troubleshooting Manual

3.
Troubleshooting Functional Failures in Operation
Table 3-49: IEEE 802.1X Failure Analysis Method [IP8800/S3600] [IP8800/S2400]
No. Troubleshooting Steps and Command
1 Confirm that VLAN with VLAN authentication
(static) set and other VLANs are not provided on the
trunk port.
2 Check to see of the authenticated terminal has moved
to the non-authentication port in the same VLAN.
3.12.2

Communication Failure on Using Web Authentication

Isolate the problem according to the failure analysis method described in
Authentication."
For checking Web authentication configuration and accounting information, isolate the problem according to the failure
analysis method described in
Authentication Failure Analysis
Table 3-50: Failure Analysis Method for Web Authentication
No. Troubleshooting Steps and Command
1 Check to see if the login screen is displayed on the
terminal.
2 Check to see if login and logout URLs are correct.
3 Check to see if Web server is working.
92
Since communication is enabled only with the VLAN on which VLAN
authentication (static) is set, exclude the port from authentication or set
the VLAN with VLAN authentication (static) and other VLANs on
different ports.
If the terminal authenticated on this system moves to the
non-authentication port, communication is disabled unless
authentication information is released. Execute the clear dot1x
auth-state command to release the authenticated state on the target
terminal.
"Table 3-51: Checking Web Authentication
Method" each.
• If login and logout screens are not displayed, go to No. 2.
• If login screen is displayed in the case of local authentication
method, go to No.3.
• If login screen is displayed in the case of RADIUS authentication
method, go to No.7.
• If operation log message appears, go to No.14.
• If not correct, use correct URLs.
• In static VLAN mode, if login screen and logout screen are unable to
display, check the following and correct them if necessary:
- Check to see if IP address dedicated for Web authentication is
configured by configuration command web-authentication
ip
command web-authentication redirect enable.
- When URL redirect is enabled in IP8800/S3600 or IP8800/S2400
models, check to see if IP address dedicated for Web authentication
is
web-authentication ip address.
- For IP8800/S6700, IP8800/S6600, and IP8800/S6300 models,
check to see if IP address dedicated for Web authentication is
configured by configuration command web-authentication
ip address.
• Otherwise, go to No. 3.
• Execute the following command and confirm that Web server is
working properly. If Web server is working, go to No.4.
[Command]
# ps -auwx | grep httpd
[Confirmation]
If /usr/local/sbin/httpd is displayed by entering the ps command, it
indicates Web server is working properly.
• If Web server is not working properly, check the status by using the
configuration command web-authentication web-port.
Action
"Table 3-50: Failure Analysis Method for Web
Configuration" and
Action
address or URL redirect is enabled by configuration
configured by configuration
"Table 3-52: Web
command