Troubleshooting guide

3. Troubleshooting Functional Failures During Operation
60
No. Items to check and commands Action
[Fixed VLAN mode]
 If the mac-authentication vlan-check configuration
command is set, make sure the MAC address and the VLAN
ID to which the terminal to be authenticated belongs are
registered.
[Dynamic VLAN mode] [Legacy mode]
 Make sure the MAC address and the post-authentication
VLAN ID are registered.
 For cases other than above, if fixed VLAN mode or dynamic
VLAN mode is used, go to No. 5.
 For other cases, go to No. 6.
3 Check whether the MAC address is
registered on the RADIUS server.
 If the MAC address is not registered as the user ID of the
RADIUS server, register the MAC address on the RADIUS
server.
 If the MAC address is registered for the user ID and
password, check the value of the MAC address.
Also check whether the MAC address format matches the
format set in the mac-authentication id-format
configuration command.
 If a character string is specified for the password, check
whether it matches the character string set in the
mac-authentication password configuration
command.
[Fixed VLAN mode]
 Check whether the RADIUS server's VLAN ID indicated by
NAS-Identifier matches the VLAN ID to which the
terminal to be authenticated belongs.
 If the mac-authentication vlan-check configuration
command is set, check whether the character string
registered as the user ID matches the combination of VLAN
ID and separator characters specified in that command.
[Dynamic VLAN mode]
 Make sure the VLAN ID of the RADIUS server matches the
VLAN ID of the authenticating port specified in the
switchport mac vlan
#1
configuration command.
 If a VLAN name has been registered on the RADIUS server,
make sure the target VLAN name matches the VLAN name
specified in the name
#2
configuration command.
[Legacy mode]
 Make sure the VLAN ID of the RADIUS server matches the
VLAN ID specified in the mac-authentication vlan
configuration command and in the switchport mac vlan
command for the port connected to the terminal to be
authenticated.
 If a VLAN name has been registered on the RADIUS server,
make sure the target VLAN name matches the VLAN name
specified in the name
#2
configuration command.
 For other cases, go to No. 4.