ZyXEL Communications NWA3000-N User Manual page 246

Chapter 21 Troubleshooting
If a RADIUS server authenticates wireless stations, the re-authentication timer on the RADIUS
server has priority. Change the RADIUS server's configuration if you need to use a different re-
authentication timer setting.
Device HA is not working.
• You may need to disable STP (Spanning Tree Protocol).
• The master and its backups must all use the same device HA mode (active-passive).
• Configure a static IP address for each interface that you will have device HA monitor.
• Configure a separate management IP address for each interface. You can use it to access the
device for management whether the device is the master or a backup. The management IP
address should be in the same subnet as the interface IP address.
• Enable monitoring for the same interfaces on the master and backup devices.
• Each monitored interface must have a static IP address and be connected to the same subnet as
the corresponding interface on the backup or master device.
• If you have multiple device virtual routers on your network, use a different cluster ID to identify
each virtual router. There can only be one master device in each virtual router (same cluster ID).
A broadcast storm results when I turn on Device HA.
Do not connect the bridge interfaces on two devices without device HA activated on both. Either
activate device HA before connecting the bridge interfaces or disable the bridge interfaces, connect
the bridge interfaces, activate device HA, and finally reactivate the bridge interfaces.
I cannot get the Device HA synchronization to work.
Only devices of the same model and firmware version can synchronize.
I cannot get a certificate to import into the device.
For My Certificates, you can import a certificate that matches a corresponding certification
1
request that was generated by the device. You can also import a certificate in PKCS#12 format,
including the certificate's public and private keys.
You must remove any spaces from the certificate's filename before you can import the certificate.
2
Any certificate that you want to import has to be in one of these file formats:
3
• Binary X.509: This is an ITU-T recommendation that defines the formats for X.509 certificates.
• PEM (Base-64) encoded X.509: This Privacy Enhanced Mail format uses lowercase letters,
uppercase letters and numerals to convert a binary X.509 certificate into a printable form.
246
NWA3000-N Series User's Guide