418 CHAPTER 16: MONITORING THE NETWORK
Authentication Failures Number of times authentication for a client failed.
Common causes of authentication failures include the
following:
User glob or MAC address glob mismatch or Unknown
user
Invalid password
RADIUS server timeout
Authorization Failures Number of times authorization for a client who has been
authenticated failed. Common causes of authorization
failures include the following:
Time-of-day, start-date, or end-date attributes do not
allow access on the date and time the client is
requesting it.
The VLAN the client is assigned to cannot be found.
Association Failures Number of times a 3Com radio refused a client’s
association request. Common causes of association
failures include the following:
The encryption cipher requested by the client is not
enabled or not supported on the radio.
A static WEP key is required but the client did not
present the correct key.
Session load balancing is enabled on the MAP and the
MAP’s maximum session count has already been
reached.
The client is requesting a different SSID than the one
for which they have been authenticated and are
authorized.
The client is already associated with the radio.
Dot1x Failures Number of times a client experienced 802.1X failures.
Common causes of 802.1X failures include the following:
A radio has already failed the client and the 802.1X
quiet period was in effect.
The authentication request sent to a RADIUS server on
behalf of the client timed out.
Bonded authentication is enabled and there was no
machine authentication session for client’s machine.
The username does not match an authentication rule’s
userglob for the requested SSID.
Table38 Client Activity Columns When a Mobility Domain is Selected
Option Description