NEC IP8800/S3600 Manuale Utente

3.   

Troubleshooting Functional Failures in Operation

96

For the configuration relating to the Web authentication accounting, check the following.

Table 3-52: Web Authentication Failure Analysis Method

5

Check to see the access filter setting for 
authentication.

When using IP8800/S3600 or IP8800/S2400 model in static VLAN 
mode, confirm that the filter condition permits pre-authenticated 
terminals to send packets out of the system by the configuration 
command authentication ip access-group or ip 
access-list extended. 

6

Check to see the ARP relay setting.

When using IP8800/S3600 or IP8800/S2400 model in static VLAN 
mode, confirm that the setting permits pre-authenticated terminals to 
send packets out of the system by the configuration command 
authentication arp-relay. 

No.

Troubleshooting Steps and Command

Action

1

Check to see if account has been recorded after 
authentication.

• When authentication status is not displayed by the show 

mac-authentication login command, see "

."

• If authentication status is not recorded in the accounting server, go to 

No.2.

• If authentication status is not recorded in the syslog server, go to 

No.3.

2

Check to see communication status with accounting 
server by the show web-authentication 
statistics command.

• When "TxTotal" of [Account frames] indicates 0, check to see if the 

setting by configuration command aaa accounting 
web-authentication default start-stop group 
radius or radius-server host is correct.

• Otherwise, check the configurations for Web authentication.

3

Check to see the settings of syslog server.

Confirm the settings by the following commands are correct.
• Confirm that syslog server is configured by the logging host 

command.

• Confirm that "aut" is set as an event kind by the logging 

event-kind command.

• Confirm that the logging is enabled by the 

web-authentication logging enable command.

No.

Check Point

Troubleshooting Steps