Table of Contents
Advertisement
3Com Router 3000 Ethernet Family
Configuration Guide
Step 1: Type username test@ tacacs.
Step 2: Choose to use the winkey.exe calculator to get the login password at the prompt
"s/key 89 gf55236".
Figure 2-13 Calculate login password
In the above figure:
Type the prompt "89 gf55236" in the Challenge field.
Type private password (test for example) in the Password field.
The Response field outputs the calculation result, that is, the password you need to
type in the login interface.
Step 3: Type the calculated password in the login interface and you are authorized to
access.
2.7 Troubleshooting AAA
2.7.1 Troubleshooting the RADIUS Protocol
The RADIUS protocol of the TCP/IP protocol suite is located at the application layer. It
mainly provisions how to exchange user information between a NAS and a RADIUS
server of an ISP. So it is very likely to get invalid.
Symptom 1: User authentication/authorization always fails
Troubleshooting:
Check that:
1)
The username is in the userid@isp-name format or a default ISP domain is
specified on the NAS.
2)
The user exists in the database on the RADIUS server.
3)
The password input by the user is correct.
4)
The same shared key is configured on both the RADIUS server and the NAS.
5)
The NAS can communicate with the RADIUS server (by pinging the RADIUS
server).
Symptom 2: RADIUS packets cannot reach the RADIUS server.
Troubleshooting:
Check that:
Chapter 2 AAA and RADIUS/HWTACACS Protocol
3Com Corporation
2-46
Configuration
Advertisement
Chapters
Table of Contents
Troubleshooting
