Troubleshooting guide

3. Troubleshooting Functional Failures During Operation
117
7Use the
show web-authentication
statistics command to check the
communication status with the RADIUS
server.
• If the value displayed for
TxTotal under [RADIUS
frames] is 0, check whether the aaa authentication
web-authentication default group radius and
radius-server host configuration commands have
been set correctly.
• For AX3800S, AX3600S, and AX2400S series switches,
even if communication is restored from the no-response
state of the RADIUS server caused by the dead interval
functionality, an authentication error occurs. This is
because no authentication check is performed on the
RADIUS server during the time interval specified by the
authentication radius-server dead-interval
configuration command.
In this case, if the authentication failure due to no response
from the RADIUS server continues too long, change the
setting value of the
authentication radius-server
dead-interval configuration command or execute the
clear web-authentication dead-interval-timer
command. The authentication operation by the first
RADIUS server resumes.
• For other cases, go to No. 8.
8 Check whether the password and user ID are
registered on the RADIUS server.
• If the user ID is not registered, register it on the RADIUS
server.
• For other cases, go to No. 9.
9Use the
show web-authentication
statistics command to check whether Web
authentication statistics are displayed.
• If Web authentication statistics are not displayed, go to No.
10.
• For other cases, go to No. 11.
10 Check whether the
web-authentication
system-auth-control configuration
command has been set.
• If the web-authentication system-auth-control
configuration command has not been set, set the command.
• For other cases, go to No. 11.
11 Execute the
show web-authentication
logging command and check for operation
problems.
• If
The login failed because of hardware
restriction. is output in the log of the show
web-authentication logging command, see
4.2.2 Actions to be taken when a VLAN identification table
resource shortage occurs.
• If authentication information for the port to which the
authentication terminal is connected is not displayed in
fixed VLAN mode, use the
web-authentication port
configuration command to check whether the
authenticating port has been set correctly.
Also, make sure that the authenticating port to which the
terminal is connected is neither in the
link-down status
nor is shut down.
• For other cases, go to No. 13.
12 If no account is recorded on the accounting
server, use the
show web-authentication
statistics command to check the
communication status with the accounting
server.
• If the value displayed for
TxTotal under [Account
frames] is 0, check whether the aaa accounting
web-authentication default start-stop group
radius and radius-server host configuration
commands have been set correctly.
• For other cases, check the Web authentication
configuration.
No. Items to check and commands Action