Command and check to see if dynamic, Server

3. Troubleshooting Functional Failures in Operation

No.	Troubleshooting Steps and Command	Action

7	Execute the show dot1x logging	• If "Failed to assign VLAN.(Reason: No Tunnel-Type Attribute)" is output, the
	command and check to see if dynamic	dynamic assignment has been failed as there is no Tunnel-Type attribute in the
	assignment of VLAN authentication	RADIUS attribute of the RADIUS frame. Add the Tunnel-Type attribute in
	(dynamic) failed.	setting of the RADIUS attribute for the RADIUS server.
		• If "Failed to assign VLAN.(Reason:Tunnel-Type Attribute is not VLAN(13) )"
		is output, the dynamic assignment has been failed as the value of Tunnel-Type
		attribute of the RADIUS attribute is not VLAN(13). Set the value of
		Tunnel-Type for the RADIUS server to VLAN(13).
		• If "Failed to assign VLAN.(Reason: No Tunnel-Medium-Type Attribute)" is
		output, the dynamic assignment has been failed as there is no
		Tunnel-Medium-Type attribute of RADIUS server. Add the
		Tunnel-Medium-Type attribute in setting of the RADIUS attribute for the
		RADIUS server.
		• If "Failed to assign VLAN. (Reason: Tunnel-Medium-Type Attribute is not
		IEEE802(6) )" is output, the dynamic assignment has been failed as the value of
		Tunnel-Medium-Type attribute is not IEEE802(6) or the Tag value did not
		match with the Tag of the Tunnel-Type attribute although the
		Tunnel-Medium-Type value was matched. Set the Tunnel-Medium-Type
		attribute value of the RADIUS attribute for the RADIUS server or Tag to the
		correct value.
		• If "Failed to assign VLAN.(Reason: No Tunnel-Private-Group-ID Attribute)" is
		output, the dynamic assignment has been failed as Tunnel-Private-Group-ID
		attribute of the RADIUS attribute for the RADIUS server is not set. Set the
		Tunnel-Private-Group-ID attribute of the RADIUS attribute for the RADIUS
		server.
		• If "Failed to assign VLAN.(Reason: Invalid Tunnel-Private-Group-ID
		Attribute)" is output, the dynamic assignment has been failed as
		Tunnel-Private-Group-ID attribute of the RADIUS attribute contained an illegal
		value. Set the correct VLAN ID for the Tunnel-Private-Group-ID attribute of
		the RADIUS attribute for the RADIUS server.
		• If "Failed to assign VLAN. (Reason: The VLAN ID is out of range.)" is output,
		the dynamic assignment has been failed as VLAN ID set for the
		Tunnel-Private-Group-ID attribute of the RADIUS attribute for the RADIUS
		server was out of range. Set the correct VLAN ID for the
		Tunnel-Private-Group-ID attribute.
		• If "Failed to assign VLAN. (Reason: The port doesn't belong to VLAN.)" is
		output, the dynamic assignment has been failed as authentication port does not
		belong to the VLAN ID specified for the Tunnel-Private-Group-ID attribute of
		the RADIUS attribute for the RADIUS server. Match the VLAN ID set for the
		Tunnel-Private-Group-ID attribute of the RADIUS attribute for the RADIUS
		server with the VLAN ID of MAC VLAN set on the authentication port.
		• If "Failed to assign VLAN. (Reason: The VLAN ID is not set to radius-vlan.)"
		is output, the VLAN ID specified for the Tunnel-Private-Group-ID attribute as
		the RADIUS attribute for the RADIUS server was not the target for VLAN
		authentication (dynamic). Match the VLAN ID set for the
		Tunnel-Private-Group-ID attribute of the RADIUS attribute for the RADIUS
		server with the VLAN ID of MAC VLAN set on the authentication port.
		Otherwise, see the log of the RADIUS server and check to see if authentication
		failed.

If communication is not possible on the port or VLAN on which IEEE 802.1X runs, isolate the problem by following failure analysis methods shown in the table below. Otherwise, see "3.5 Layer 2 Network Communication Failure."

[IP8800/S3600] [IP8800/S2400]

IP8800/S6700, IP8800/S3600, IP8800/S6600, IP8800/S6300, IP8800/S2400 specifications

The NEC IP8800 series comprises a range of advanced networking solutions designed for various applications ranging from enterprise networking to service provider environments. This series includes models such as the IP8800/S2400, IP8800/S3600, IP8800/S6300, IP8800/S6600, and IP8800/S6700, each with its unique set of features and capabilities aimed at delivering robust performance, security, and scalability.

The IP8800/S2400 is an entry-level switch tailored for small to medium enterprises. It features a compact design and high port density, making it ideal for network edge applications. The model supports both Layer 2 and Layer 3 switching capabilities, enabling efficient traffic management. With its robust security features, including access control lists and support for VLANs, the IP8800/S2400 ensures secure connectivity.

Moving to the IP8800/S3600, this switch is designed for data center environments and offers high throughput with advanced routing capabilities. It is equipped with high-capacity 10G and 40G Ethernet ports, facilitating faster data transfer rates. The S3600 supports various protocols such as MPLS and Segment Routing, enhancing its ability to manage complex network architectures. Its energy-efficient design also helps reduce operational costs.

The IP8800/S6300 is tailored for high-performance networking scenarios, featuring a flexible architecture that supports both traditional and cloud-based services. With extensive QoS capabilities, the S6300 optimizes traffic flow and manages bandwidth efficiently, ensuring high-quality service delivery. Its virtualization support allows for easier integration into modern, software-defined networking environments.

The IP8800/S6600 provides a comprehensive solution for service providers and large enterprises, boasting high scalability and modularity. This model supports advanced features such as network slicing and the ability to handle high-density 100G interfaces. Its robust management tools, including centralized control and automation capabilities, simplify network operations significantly.

Finally, the IP8800/S6700 represents the pinnacle of the series, designed for mission-critical applications requiring the utmost reliability and performance. It supports advanced analytics, AI-driven insights, and comprehensive telemetry, enabling proactive network management. With high availability features and extensive redundancy options, the S6700 ensures continuous operation, making it ideal for core network functions.

In summary, the NEC IP8800 series offers a versatile range of switches that combine advanced technologies, high performance, and robust security features, catering to various networking needs across different industries. Each model is designed to provide not only superior connectivity but also the flexibility and scalability required in today’s fast-paced digital landscape.

NEC IP8800/S6700 Command and check to see if dynamic, Assignment of Vlan authentication, Server

Models: IP8800/S6700 IP8800/S3600 IP8800/S6600 IP8800/S6300 IP8800/S2400

command and check to see if dynamic

assignment of VLAN authentication

Tunnel-Type for the RADIUS server to VLAN(13).

Tunnel-Medium-Type attribute of RADIUS server. Add the

match with the Tag of the Tunnel-Type attribute although the

correct value.

server.

the RADIUS attribute for the RADIUS server.

the dynamic assignment has been failed as VLAN ID set for the

server was out of range. Set the correct VLAN ID for the

Tunnel-Private-Group-ID attribute.

authentication (dynamic). Match the VLAN ID set for the

failed.

[IP8800/S3600] [IP8800/S2400]

IP8800/S6700, IP8800/S3600, IP8800/S6600, IP8800/S6300, IP8800/S2400 specifications