NEC IP8800/S6300 Manuale Utente
3.
Troubleshooting Functional Failures in Operation
92
Table 3-49: IEEE 802.1X Failure Analysis Method [IP8800/S3600] [IP8800/S2400]
3.12.2
Communication Failure on Using Web Authentication
Isolate the problem according to the failure analysis method described in "
For checking Web authentication configuration and accounting information, isolate the problem according to the failure
analysis method described in "
analysis method described in "
" and "
" each.
Table 3-50: Failure Analysis Method for Web Authentication
No.
Troubleshooting Steps and Command
Action
1
Confirm that VLAN with VLAN authentication
(static) set and other VLANs are not provided on the
trunk port.
(static) set and other VLANs are not provided on the
trunk port.
Since communication is enabled only with the VLAN on which VLAN
authentication (static) is set, exclude the port from authentication or set
the VLAN with VLAN authentication (static) and other VLANs on
different ports.
authentication (static) is set, exclude the port from authentication or set
the VLAN with VLAN authentication (static) and other VLANs on
different ports.
2
Check to see of the authenticated terminal has moved
to the non-authentication port in the same VLAN.
to the non-authentication port in the same VLAN.
If the terminal authenticated on this system moves to the
non-authentication port, communication is disabled unless
authentication information is released. Execute the clear dot1x
auth-state command to release the authenticated state on the target
terminal.
non-authentication port, communication is disabled unless
authentication information is released. Execute the clear dot1x
auth-state command to release the authenticated state on the target
terminal.
No.
Troubleshooting Steps and Command
Action
1
Check to see if the login screen is displayed on the
terminal.
terminal.
• If login and logout screens are not displayed, go to No. 2.
• If login screen is displayed in the case of local authentication
• If login screen is displayed in the case of local authentication
method, go to No.3.
• If login screen is displayed in the case of RADIUS authentication
method, go to No.7.
• If operation log message appears, go to No.14.
2
Check to see if login and logout URLs are correct.
• If not correct, use correct URLs.
• In static VLAN mode, if login screen and logout screen are unable to
• In static VLAN mode, if login screen and logout screen are unable to
display, check the following and correct them if necessary:
- Check to see if IP address dedicated for Web authentication is
configured by configuration command web-authentication
ip address or URL redirect is enabled by configuration
command web-authentication redirect enable.
ip address or URL redirect is enabled by configuration
command web-authentication redirect enable.
- When URL redirect is enabled in IP8800/S3600 or IP8800/S2400
models, check to see if IP address dedicated for Web authentication
is configured by configuration command
web-authentication ip address.
is configured by configuration command
web-authentication ip address.
- For IP8800/S6700, IP8800/S6600, and IP8800/S6300 models,
check to see if IP address dedicated for Web authentication is
configured by configuration command web-authentication
ip address.
configured by configuration command web-authentication
ip address.
• Otherwise, go to No. 3.
3
Check to see if Web server is working.
• Execute the following command and confirm that Web server is
working properly. If Web server is working, go to No.4.
[Command]
# ps -auwx | grep httpd
[Confirmation]
If /usr/local/sbin/httpd is displayed by entering the ps command, it
indicates Web server is working properly.
[Command]
# ps -auwx | grep httpd
[Confirmation]
If /usr/local/sbin/httpd is displayed by entering the ps command, it
indicates Web server is working properly.
• If Web server is not working properly, check the status by using the
configuration command web-authentication web-port.