3. Troubleshooting Functional Failures in Operation

No.

Troubleshooting Steps and Command

Action

 

 

 

7

Execute the show dot1x logging

• If "Failed to assign VLAN.(Reason: No Tunnel-Type Attribute)" is output, the

 

command and check to see if dynamic

dynamic assignment has been failed as there is no Tunnel-Type attribute in the

 

assignment of VLAN authentication

RADIUS attribute of the RADIUS frame. Add the Tunnel-Type attribute in

 

(dynamic) failed.

setting of the RADIUS attribute for the RADIUS server.

 

 

• If "Failed to assign VLAN.(Reason:Tunnel-Type Attribute is not VLAN(13) )"

 

 

is output, the dynamic assignment has been failed as the value of Tunnel-Type

 

 

attribute of the RADIUS attribute is not VLAN(13). Set the value of

 

 

Tunnel-Type for the RADIUS server to VLAN(13).

 

 

• If "Failed to assign VLAN.(Reason: No Tunnel-Medium-Type Attribute)" is

 

 

output, the dynamic assignment has been failed as there is no

 

 

Tunnel-Medium-Type attribute of RADIUS server. Add the

 

 

Tunnel-Medium-Type attribute in setting of the RADIUS attribute for the

 

 

RADIUS server.

 

 

• If "Failed to assign VLAN. (Reason: Tunnel-Medium-Type Attribute is not

 

 

IEEE802(6) )" is output, the dynamic assignment has been failed as the value of

 

 

Tunnel-Medium-Type attribute is not IEEE802(6) or the Tag value did not

 

 

match with the Tag of the Tunnel-Type attribute although the

 

 

Tunnel-Medium-Type value was matched. Set the Tunnel-Medium-Type

 

 

attribute value of the RADIUS attribute for the RADIUS server or Tag to the

 

 

correct value.

 

 

• If "Failed to assign VLAN.(Reason: No Tunnel-Private-Group-ID Attribute)" is

 

 

output, the dynamic assignment has been failed as Tunnel-Private-Group-ID

 

 

attribute of the RADIUS attribute for the RADIUS server is not set. Set the

 

 

Tunnel-Private-Group-ID attribute of the RADIUS attribute for the RADIUS

 

 

server.

 

 

• If "Failed to assign VLAN.(Reason: Invalid Tunnel-Private-Group-ID

 

 

Attribute)" is output, the dynamic assignment has been failed as

 

 

Tunnel-Private-Group-ID attribute of the RADIUS attribute contained an illegal

 

 

value. Set the correct VLAN ID for the Tunnel-Private-Group-ID attribute of

 

 

the RADIUS attribute for the RADIUS server.

 

 

• If "Failed to assign VLAN. (Reason: The VLAN ID is out of range.)" is output,

 

 

the dynamic assignment has been failed as VLAN ID set for the

 

 

Tunnel-Private-Group-ID attribute of the RADIUS attribute for the RADIUS

 

 

server was out of range. Set the correct VLAN ID for the

 

 

Tunnel-Private-Group-ID attribute.

 

 

• If "Failed to assign VLAN. (Reason: The port doesn't belong to VLAN.)" is

 

 

output, the dynamic assignment has been failed as authentication port does not

 

 

belong to the VLAN ID specified for the Tunnel-Private-Group-ID attribute of

 

 

the RADIUS attribute for the RADIUS server. Match the VLAN ID set for the

 

 

Tunnel-Private-Group-ID attribute of the RADIUS attribute for the RADIUS

 

 

server with the VLAN ID of MAC VLAN set on the authentication port.

 

 

• If "Failed to assign VLAN. (Reason: The VLAN ID is not set to radius-vlan.)"

 

 

is output, the VLAN ID specified for the Tunnel-Private-Group-ID attribute as

 

 

the RADIUS attribute for the RADIUS server was not the target for VLAN

 

 

authentication (dynamic). Match the VLAN ID set for the

 

 

Tunnel-Private-Group-ID attribute of the RADIUS attribute for the RADIUS

 

 

server with the VLAN ID of MAC VLAN set on the authentication port.

 

 

Otherwise, see the log of the RADIUS server and check to see if authentication

 

 

failed.

 

 

 

If communication is not possible on the port or VLAN on which IEEE 802.1X runs, isolate the problem by following failure analysis methods shown in the table below. Otherwise, see "3.5 Layer 2 Network Communication Failure."

[IP8800/S3600] [IP8800/S2400]

91

Page 152 Page 154
Page 153
Image 153
NEC IP8800/S6700 Command and check to see if dynamic, Assignment of Vlan authentication, Correct value, Server, Failed
Page 152 Page 154

IP8800/S6700, IP8800/S3600, IP8800/S6600, IP8800/S6300, IP8800/S2400 specifications

The NEC IP8800 series comprises a range of advanced networking solutions designed for various applications ranging from enterprise networking to service provider environments. This series includes models such as the IP8800/S2400, IP8800/S3600, IP8800/S6300, IP8800/S6600, and IP8800/S6700, each with its unique set of features and capabilities aimed at delivering robust performance, security, and scalability.

The IP8800/S2400 is an entry-level switch tailored for small to medium enterprises. It features a compact design and high port density, making it ideal for network edge applications. The model supports both Layer 2 and Layer 3 switching capabilities, enabling efficient traffic management. With its robust security features, including access control lists and support for VLANs, the IP8800/S2400 ensures secure connectivity.

Moving to the IP8800/S3600, this switch is designed for data center environments and offers high throughput with advanced routing capabilities. It is equipped with high-capacity 10G and 40G Ethernet ports, facilitating faster data transfer rates. The S3600 supports various protocols such as MPLS and Segment Routing, enhancing its ability to manage complex network architectures. Its energy-efficient design also helps reduce operational costs.

The IP8800/S6300 is tailored for high-performance networking scenarios, featuring a flexible architecture that supports both traditional and cloud-based services. With extensive QoS capabilities, the S6300 optimizes traffic flow and manages bandwidth efficiently, ensuring high-quality service delivery. Its virtualization support allows for easier integration into modern, software-defined networking environments.

The IP8800/S6600 provides a comprehensive solution for service providers and large enterprises, boasting high scalability and modularity. This model supports advanced features such as network slicing and the ability to handle high-density 100G interfaces. Its robust management tools, including centralized control and automation capabilities, simplify network operations significantly.

Finally, the IP8800/S6700 represents the pinnacle of the series, designed for mission-critical applications requiring the utmost reliability and performance. It supports advanced analytics, AI-driven insights, and comprehensive telemetry, enabling proactive network management. With high availability features and extensive redundancy options, the S6700 ensures continuous operation, making it ideal for core network functions.

In summary, the NEC IP8800 series offers a versatile range of switches that combine advanced technologies, high performance, and robust security features, catering to various networking needs across different industries. Each model is designed to provide not only superior connectivity but also the flexibility and scalability required in today’s fast-paced digital landscape.
Top Page Image Contents