Aaa And Radius Protocol Fault Diagnosis And Troubleshooting - 3Com Switch 4500 26-Port Configuration Manual

224 C 11: 802.1X C
HAPTER
AAA and RADIUS
Protocol Fault Diagnosis
and Troubleshooting
ONFIGURATION
The RADIUS protocol of the TCP/IP protocol suite is located on the application
layer. It mainly specifies how to exchange user information between NAS and
RADIUS server of ISP. So it is likely to be invalid.
Fault One: User Authentication/Authorization Always Fails
Troubleshooting:
The username may not be in the
■
been configured with a default ISP domain. Use the username in proper format
and configure the default ISP domain on NAS.
The user may have not been configured in the RADIUS server database. Check
■
the database and make sure that the configuration information of the user
does exist in the database.
The user may have input a wrong password. So make sure that the user inputs
■
the correct password.
The encryption keys of RADIUS server and NAS may be different. Check
■
carefully and make sure that they are identical.
There might be some communication fault between NAS and RADIUS server,
■
which can be discovered through pinging RADIUS from NAS. So ensure there is
normal communication between NAS and RADIUS.
Fault Two: RADIUS Packet Cannot be Transmitted to RADIUS Server
Troubleshooting:
The communication lines (on physical layer or link layer) connecting NAS and
■
the RADIUS server may not work well. So ensure the lines work well.
The IP address of the corresponding RADIUS server may not have been set on
■
NAS. Set a proper IP address for RADIUS server.
UDP ports of authentication/authorization and accounting services may not be
■
set properly. So make sure they are consistent with the ports provided by
RADIUS server.
Fault Three: After Being Authenticated and Authorized, the User Cannot
Send Charging Bill to the RADIUS Server
Troubleshooting:
The accounting port number may be set improperly. Please set a proper
■
number.
The accounting service and authentication/authorization service are provided
■
on different servers, but NAS requires the services to be provided on one server
(by specifying the same IP address). So make sure the settings of the servers are
consistent with the actual conditions.
format or NAS has not
userid@isp-name