Troubleshooting guide

3. Troubleshooting Functional Failures During Operation
125
Check the following for the configuration related to the authentication VLAN.
Table 3-66: Checking the configuration of the authentication VLAN
8Execute the show vlan mac-vlan command,
and make sure authenticated MAC addresses
have been registered for the MAC VLAN
functionality.
• If the
show vlan mac-vlan command shows that
authenticated MAC addresses have been registered,
authentication of those MAC addresses cannot be enabled.
Delete the registered MAC addresses.
• If MAC addresses authenticated for each VLAN are not
displayed, an internal inconsistency has occurred. Use the
restart vaa command to restart the authentication
VLAN.
• If the authentication VLAN restarts but authenticated
MAC addresses are not displayed, execute the
restart
vlan command with the mac-manager parameter to
restart the L2MAC manager program.
• For other cases, go to No. 9.
9Execute the
show fense logging command,
and make sure communication with the
authentication server is operating normally.
• For AX6700S, AX6600S, or AX6300S series switches, if
The registration of the MAC address failed. is
output in the log of the show fense logging command,
see 4.2.2 Actions to be taken when a VLAN identification
table resource shortage occurs.
For other cases, check the authentication VLAN configuration.
No. Items to check Action
1 Check the authentication VLAN configuration
settings.
Make sure the following configuration commands have been
set correctly.
•
fense vaa-name
• fense vlan
• fense server
• fense retry-count
• fense retry-timer
• fense alive-timer
2 Check the IP address settings for the VLAN
interfaces.
Make sure the IP addresses for the following VLAN interfaces
are set correctly:
• VLAN used for authentication
• Authenticated VLAN
• VLAN for the authentication server
• VLAN for the network to be accessed
3 Check the DHCP relay agent configuration. Make sure that the DHCP relay agents are correctly set
between the following VLANs:
• Between the VLAN used for authentication and the VLAN
for the authentication server
• Between the authenticated VLAN and the VLAN for the
authentication server
No. Items to check and commands Action