Troubleshooting Aaa; Troubleshooting Radius - HP 6125G Configuration Manual

Security configuration guide
Hide thumbs Also See for 6125G:
Table of Contents

Advertisement

<SwitchB> system-view
[SwitchB] radius-server user aaa
# Configure plaintext password aabbcc for user aaa.
[SwitchB-rdsuser-aaa] password simple aabbcc
[SwitchB-rdsuser-aaa] quit
# Specify the IP address of the RADIUS client as 10.1.1.1 and the plaintext shared key as abc.
[SwitchB] radius-server client-ip 10.1.1.1 key simple abc
Verify the configuration:
4.
After entering username aaa@bbb or aaa and password aabbcc, user aaa can telnet to Switch A.
Use the display connection command to view the connection information on Switch A.
<SwitchA> display connection
Index=1
IP=192.168.1.2
IPv6=N/A
Total 1 connection(s) matched.

Troubleshooting AAA

Troubleshooting RADIUS

Symptom 1
User authentication/authorization always fails.
Analysis
A communication failure exists between the NAS and the RADIUS server.
1.
The username is not in the format of userid@isp-name or the ISP domain for the user authentication
2.
is not correctly configured on the NAS.
The user is not configured on the RADIUS server.
3.
The password entered by the user is incorrect.
4.
The RADIUS server and the NAS are configured with different shared key.
5.
Solution
Check that:
The NAS and the RADIUS server can ping each other.
1.
The username is in the userid@isp-name format and the ISP domain for the user authentication is
2.
correctly configured on the NAS.
The user is configured on the RADIUS server.
3.
The correct password is entered.
4.
The same shared key is configured on both the RADIUS server and the NAS.
5.
Symptom 2
RADIUS packets cannot reach the RADIUS server.
,Username=aaa@bbb
63

Advertisement

Table of Contents
loading

This manual is also suitable for:

6125 blade switch series

Table of Contents