Troubleshooting guide

3. Troubleshooting Functional Failures During Operation
57
#2
Be careful of the following when using a VLAN name configured using the name configuration command
as a VLAN after RADIUS authentication.

Specify a unique VLAN name. If the same VLAN name is used for two or more VLANs, the
smallest VLAN ID is allocated as the post-authentication VLAN in RADIUS authentication mode.
 Do not specify a number at the beginning of the VLAN name. A number at the
beginning will be recognized as the VLAN ID, which might result in an
authentication failure.
Check the following for the configuration related to Web authentication.
Table 3-28 Checking the configuration of Web authentication
No. Items to check and commands Action
1 Web authentication configuration Make sure the following configuration commands have been set
correctly.
Common to Web authentication
 aaa authentication web-authentication default
group radius
 web-authentication auto-logout
 web-authentication max-timer
 web-authentication system-auth-control
[Fixed VLAN mode]
 web-authentication port
 web-authentication static-vlan max-user
 authentication arp-relay
 authentication ip access-group
 web-authentication redirect enable
 web-authentication redirect-mode
[Dynamic VLAN mode]
 web-authentication port
 web-authentication max-user
 authentication arp-relay
 authentication ip access-group
 web-authentication redirect enable
 web-authentication redirect-mode
[Legacy mode]
 web-authentication max-user
 web-authentication vlan
2 Check the IP address settings for
the VLAN interfaces.
[Fixed VLAN mode]
Make sure the IP address for the VLAN interface is set correctly.
[Dynamic VLAN mode] [Legacy mode]
Make sure the IP addresses for the following VLAN interfaces are set
correctly:
 Pre-authentication VLAN
 Post-authentication VLAN
3 Configuring the DHCP server
If a DHCP server is used, see (1) Communication failures occurring
when the DHCP server is used
3.7.2(1).