Communication Failures Occurring When An Authentication Vlan Is Used - Alaxala AX6700S Troubleshooting Manual

3.12.4 Communication failures occurring when an authentication VLAN is used

If a failure occurs when an authentication VLAN is used, isolate the cause of the problem
according to the following table.
Table 3-64 Failure analysis method for the authentication VLAN
No. Items to check and commands
1 Execute the
show logging
and check whether any hardware failure
is recorded in the operation log.
2 Execute the
show fense server
command to make sure the VLAN is
operating normally.
3 Execute the
show fense server
command to check the operating status
of the authentication VLAN.
4 Execute the
show fense server
command to check the connection status
to the authentication server.
5 Execute the
show fense server
command with the
check the setting of the
configuration.
6 Execute the
show fense statistics
command multiple times to check the
connection status to the authentication
server.
3 Troubleshooting Functional Failures During Operation
command,
parameter to
detail
fense vlan
Action
If any hardware failure is recorded in the operation
log, replace the device.
For other cases, go to No. 2.
If the error message
is displayed, take action described in No.
program.
8.
For other cases, go to No. 3.
If VAA NAME is not set (i.e.,
command is not set in the
fense vaa-name
configuration. Set the
the configuration.
If is displayed for
disable
authentication VLAN is not operating. Check the
configuration.
For other cases, go to No. 4.
If the IP address of the authentication server is not
displayed for
Server Address
communication with the authentication server is not
possible. That is also the case if the TCP port number
of the authentication server is not displayed for
of VAA IDs. Check the configuration.
If a value other than
of VAA IDs, the VLAN is not
Agent Status
connected to the authentication server. Check the
status and settings of the authentication server.
For other cases, go to No. 5.
If no VLAN ID is displayed for VAA IDs or incorrect
information is displayed, there is no VLAN to be
switched after authentication of terminals. Check the
configuration.
For other cases, go to No. 6.
If the values of
Connect Failure Count
Timeout Disconnect Count
the connection to the authentication server is
unstable. Check the status of the network between
the authentication server and authentication VLAN.
If the network status is normal, make sure that the
value set by the
alive-time
configuration command and the setting parameters
(HCinterval and RecvMsgTimeout) for the
authentication server meet the following conditions.
alive-time >= HCinterval + 5
RecvMsgTimeout >= HCinterval + 5
If the authentication VLAN repeats connecting and
disconnecting to the authentication server, use the
command to restart the authentication
restart vaa
VLAN. Furthermore, restart VLANaccessController
Connection failed to VAA
is displayed), the
-
command in
fense vaa-name
of VAA IDs, the
Status
of VAA IDs,
is displayed for
CONNECTED
and
increase for VAA IDs,
fense alive-timer
Port
135