Troubleshooting guide

3. Troubleshooting Functional Failures During Operation
56
No. Items to check and commands Action
[Legacy mode]
 Make sure the VLAN ID of the RADIUS server matches the
VLAN ID specified in the web-authentication vlan
configuration command and in the switchport mac vlan
command for the port connected to the terminal to be
authenticated.
 If a VLAN name has been registered on the RADIUS server,
make sure the target VLAN name matches the VLAN name
specified in the name
#2
configuration command.
 For other cases, go to No. 10.
9 Use the show logging operation
command to check whether HTTP
server initialization
failed. is recorded in the log.
 If the log data is recorded, the SSL certificate and private key
are not correct. Obtain the correct certificate and private key,
and then re-install them on the switch.
 For other cases, go to No. 10.
10 Use the show
web-authentication
statistics operation command
to check whether Web
authentication statistics are
displayed.
 If Web authentication statistics are not displayed, go to No. 11.
 For other cases, go to No. 12.
11 Check whether the
web-authentication
system-auth-control
configuration command has been
set.
 If the web-authentication system-auth-control
configuration command has not been set, set the command.
 For other cases, go to No. 12.
12 Execute the show
web-authentication
logging command and check for
operation problems.
If the following operation log data is not displayed with operation log
type LOGIN, authentication has failed:
 Login succeeded
 Login update succeeded
Check the operation log, and review the settings of the RADIUS
server, internal Web authentication DB, and configuration. (For
details about the operation log, see the Operation Command
Reference).
[Fixed VLAN mode] [Dynamic VLAN mode]
 If authentication information for the port to which the
authentication terminal is connected is not displayed, check
whether the authenticating port has been configured correctly
by using the web-authentication port configuration
command.
Common to Web authentication
 Make sure the authenticating port to which the terminal is
connected is neither in the link-down status nor shut down.
 For other cases, check the Web authentication configuration.
#1
If the switchport mac vlan configuration command has not been set, check whether the VLAN ID
for the RADIUS server has been set by using the
vlan configuration command with mac-based
specified.