Troubleshooting Web Authentication; Failure To Come Line (Web Authentication Configuration Correct); Failure To Come Online (Local Authentication Interface Using The Default Isp Domain) - HPE FlexNetwork 7500 Series Security Configuration Manual

# Specify domain dml as the Web authentication domain.
[Device] interface gigabitethernet 1/0/1
[Device-GigabitEthernet1/0/1] web-auth domain dm1
# Enable Web authentication by using Web authentication server user.
[Device-GigabitEthernet1/0/1] web-auth enable apply server user
[Device-GigabitEthernet1/0/1] quit
Verifying the configuration
# Display Web authentication user information after user user1 passes Web authentication.
<Device> display web-auth user
Online web-auth users: 1
User Name: user1
MAC address: acf1-df6c-f9ad
Access interface: GigabitEthernet1/0/1
Initial VLAN: 1
Authorization VLAN: N/A
Authorization ACL ID: N/A
Authorization user profile: N/A

Troubleshooting Web authentication

Failure to come line (Web authentication configuration
correct)
Symptom
A Web authentication page can be correctly pushed, but a local user cannot pass Web
authentication to come online.
The display this command displays that Web authentication settings have been correctly
configured, including the local user, Web authentication server, authentication domain, loopback and
VLAN interface settings.
The display this command displays that Web authentication is enabled both on the user access
interface and the RADIUS server-facing interface.
Analysis
Web authentication needs to be enabled only on the user access interface. Web authentication
cannot operate correctly if it is enabled on both the user access interface and the RADIUS
server-facing interface.
Solution
Disable Web authentication on the RADIUS server-connecting interface.
Failure to come online (local authentication interface using
the default ISP domain)
Symptom
No authentication domain is specified for the local authentication interface. A user fails to pass Web
authentication to come online.
511