Communication Failures Occurring When Mac-Based Authentication Is Used - Alaxala AX6700S series Troubleshooting Manual

3. Troubleshooting Functional Failures During Operation
No. Items to check
5 Check the configuration of the access filter for
authentication.
6 Check the ARP relay configuration.
Check the following for the accounting of Web authentication.
Table 3-61: Checking the accounting of Web authentication
No. Items to check
1 Check whether authentication result account
logs have been correctly recorded.
2 Use the
show web-authentication
command to check the
statistics
communication status with the accounting
server.
3 Check the syslog server configuration.
3.13.3 Communication failures occurring when MAC-based authentication is
used
If a failure occurs when MAC-based authentication is used, isolate the cause of the problem
according to the failure analysis method described in Table 3-62: Failure analysis method for
MAC-based authentication.
For details about checking the configuration and accounting of MAC-based authentication, see
Table 3-63: Checking the configuration of MAC-based authentication and
Table 3-64: Checking the accounting of MAC-based authentication, respectively, to isolate the
cause of the problem.
120
Action
For fixed or dynamic VLAN mode, make sure the filter
conditions required for communication from unauthenticated
terminals to destinations outside the Switch have been set
correctly by using the
authentication ip access-group
and
ip access-list extended
For AX3800S, AX3600S, and AX2400S series switches, in
fixed or dynamic VLAN mode, make sure the
authentication arp-relay
been set correctly so that unauthenticated terminals can send
ARP packets to devices outside the Switch.
Action
• If no authentication state is displayed in the execution
result of the
show web-authentication login
command, see Table 3-59: Failure analysis method for
Web authenticationand take necessary action.
• If the logs are not recorded on the accounting server, go to
No. 2.
• If the logs are not recorded on the syslog server, go to No.
3.
• If the value displayed for
is , check whether the
frames] 0
web-authentication default start-stop group
or
radius radius-server host
has been set correctly.
• For other cases, check the Web authentication
configuration.
Make sure the following configuration commands have been
set correctly.
• Make sure that the syslog server has been set by the
command.
logging host
• Make sure that has been set for the event type in the
aut
logging event-kind
• Make sure that the
web-authentication logging
command has been set.
enable
configuration commands.
configuration command has
under
TxTotal [Account
aaa accounting
configuration command
command.