Detailed Troubleshooting - AMIGOPOD PowerConnect W Clearpass 100 Software Tech Note

Tech Note – RADIUS Troubleshooting

Detailed Troubleshooting

If deeper troubleshooting is required, you can enable a detailed RADIUS debugger session
by clicking on the Debug RADIUS Server button shown in the amigopod screenshot below.
When debugging RADIUS problems, the #1 problem to watch out for is incorrect shared
secrets. This is almost always the problem when diagnosing a "Login incorrect" message.
The following section shows some typical failure scenarios and what you can expect to see
in the amigopod RADIUS Debug screens.
For completeness, we have tried all 8 combinations of PAP/CHAP authentication, correct
password/incorrect password, and correct shared secret/incorrect shared secret.
The results are as follows:
Correct Password - Correct shared secret - CHAP ==> Access-Accept
Correct Password - Correct shared secret - PAP ==> Access-Accept
Correct password - Incorrect shared secret - CHAP ==> Access-Accept
Correct password - Incorrect shared secret - PAP ==> Access-Reject
[demo@example.com]
Incorrect password - Correct shared secret - CHAP ==> Access-Reject
(rlm_chap: Wrong user password): [demo@example.com]
Incorrect password - Correct shared secret - PAP ==> Access-Reject
[demo@example.com]
Incorrect password - Incorrect shared secret - CHAP ==> Access-Reject
(rlm_chap: Wrong user password): [demo@example.com]
Incorrect password - Incorrect shared secret - PAP ==> Access-Reject
[demo@example.com]
CONFIDENTIAL
Version 0.9
Login incorrect:
Login incorrect
Login incorrect:
Login incorrect
Login incorrect:
4