NEC IP8800/S6300 Manuale Utente
3.
Troubleshooting Functional Failures in Operation
98
For the configuration relating to the MAC authentication, check the following:
5
Check to see authentication IPv4 access list.
• For IP8800/S6700, IP8800/S6600, and IP8800/S6300 models, go to
No.6.
• For IP8800/S3600 and IP8800/S2400 models, if pre-authenticated
terminal sends packets out of the system, confirm that authentication
IPv4 access list is applied.
If access list and authentication IPv4 access list both are applied to
the port for authentication, make sure the filter conditions described
in IPv4 access list are set in the access list as well.
IPv4 access list is applied.
If access list and authentication IPv4 access list both are applied to
the port for authentication, make sure the filter conditions described
in IPv4 access list are set in the access list as well.
• If communication is established without any authentication, confirm
that filter condition for permitting packets (such as permit ip any) is
not applied to the port for authentication.
not applied to the port for authentication.
• Even if the filter condition (deny ip any any) is set to authentication
IPv4 access list applied to the port for authentication, MAC
authentication is performed using received ARP packets. If you want
to put the port out of MAC authentication, you need to disable it by
using the configuration command no mac-authentication
port.
authentication is performed using received ARP packets. If you want
to put the port out of MAC authentication, you need to disable it by
using the configuration command no mac-authentication
port.
• Otherwise, go to No.6.
6
Check to see if statistics information on MAC
authentication is displayed by the show
mac-authentication statistics
command
authentication is displayed by the show
mac-authentication statistics
command
• If statistics information on MAC authentication is not displayed, go
to No.7.
• Otherwise, go to No.8.
7
Confirm that the setting is completed by the
configuration command mac-authentication
system-auth-control.
configuration command mac-authentication
system-auth-control.
• If the setting is not completed by the configuration command
mac-authentication system-auth-control, complete
it.
it.
• Confirm that the port for authentication is correctly configured by
the configuration command mac-authentication port.
• Confirm that the port for authentication is neither linkdown nor
shutdown.
• Otherwise, go to No.8.
8
Confirm that actions caused by the show
mac-authentication logging command is
completed without any problem.
mac-authentication logging command is
completed without any problem.
• If terminals have authenticated themselves up to the maximum
number of lines, you need to wait until other terminal cancel the
authentication.
authentication.
• Otherwise, check to see the configuration of MAC authentication.
No.
Troubleshooting Steps and Command
Action