3. Troubleshooting Functional Failures in Operation

No.

Troubleshooting Steps and Command

Action

 

 

 

4

Check to see authentication Ipv4 access list

For IP8800/S6700, IP8800/S6600, and IP8800/S6300 models, go to

 

 

No.9.

 

 

If a terminal before authentication sends packets out of the system,

 

 

confirm that authentication IPv4 access list is applied.

 

 

If access list and authentication IPv4 access list both are applied to

 

 

the port for authentication, make sure the filter conditions described

 

 

in IPv4 access list are set in the access list as well.

 

 

Confirm that filter condition for denying packets (such as deny ip) is

 

 

not set to the access list/authentication IPv4 access list applied to the

 

 

port for authentication.

 

 

Confirm that the IP address dedicated for Web authentication is not

 

 

set in the filter condition of authentication IPv4 access list.

 

 

Confirm that "any" is not specified as a destination address in the

 

 

filter conditions of authentication IPv4 access list.

 

 

Otherwise, go to No.9.

 

 

 

5

Use the show web-authentication user

If not registered, use the set web-authentication user

 

command to check to see if user ID is registered.

command to register the user ID, password, and VLAN-ID.

 

 

Otherwise, go to No. 6.

 

 

 

6

Check to see if the entered password is correct.

If not correct, use the set web-authentication passwd

 

 

command to change the password, or use the remove

 

 

web-authentication user command to delete the user ID

 

 

once, then use the set web-authentication user

 

 

command to register the user ID, password, and VLAN-ID again.

 

 

Otherwise, go to No. 9.

 

 

 

7

Use the show web-authentication

If the value of "TxError" of "[RADIUS frames]" is "0", check to see

 

statistics command to check the

if aaa authentication web-authentication

 

communication status with the RADIUS server.

default group radius and radius-server host in the

 

 

configuration command are set correctly.

 

 

For IP8800/S3600 and IP8800/S2400 models, even though the dead

 

 

interval lets RADIUS server get recovered from no-response state

 

 

and become able to communicate, the system is not able to collate

 

 

with the RADIUS server during a period of time specified by the

 

 

configuration command authentication radius-server

 

 

dead-interval. As a result, authentication error occurs.

 

 

In this case, if the period of time is too long for the system to wait for

 

 

an authentication error response, change the set value of

 

 

configuration command authentication radius-server

 

 

dead-interval or execute the clear

 

 

web-authentication dead-interval-timer command.

 

 

Authentication action against the first RADIUS will be taken again.

 

 

Otherwise, go to No. 8.

 

 

 

8

Check to see if the user ID and password are

If not registered, register the user ID and password for the RADIUS

 

registered for the RADIUS server.

server.

 

 

Otherwise, go to No. 9.

 

 

 

9

Use the show web-authentication

If not displayed, go to No. 8.

 

statistics command to check to see if Web

Otherwise, go to No. 11.

 

authentication statistical information is displayed.

 

10

Check to see if configuration command

If not, set the configuration command web-authentication

 

web-authentication

system-auth-control.

 

system-auth-control is set.

Otherwise, go to No. 11.

93

Page 155
Image 155
NEC IP8800/S6600 Check to see authentication Ipv4 access list, No.9, IPv4 access list are set in the access list as well

IP8800/S6700, IP8800/S3600, IP8800/S6600, IP8800/S6300, IP8800/S2400 specifications

The NEC IP8800 series comprises a range of advanced networking solutions designed for various applications ranging from enterprise networking to service provider environments. This series includes models such as the IP8800/S2400, IP8800/S3600, IP8800/S6300, IP8800/S6600, and IP8800/S6700, each with its unique set of features and capabilities aimed at delivering robust performance, security, and scalability.

The IP8800/S2400 is an entry-level switch tailored for small to medium enterprises. It features a compact design and high port density, making it ideal for network edge applications. The model supports both Layer 2 and Layer 3 switching capabilities, enabling efficient traffic management. With its robust security features, including access control lists and support for VLANs, the IP8800/S2400 ensures secure connectivity.

Moving to the IP8800/S3600, this switch is designed for data center environments and offers high throughput with advanced routing capabilities. It is equipped with high-capacity 10G and 40G Ethernet ports, facilitating faster data transfer rates. The S3600 supports various protocols such as MPLS and Segment Routing, enhancing its ability to manage complex network architectures. Its energy-efficient design also helps reduce operational costs.

The IP8800/S6300 is tailored for high-performance networking scenarios, featuring a flexible architecture that supports both traditional and cloud-based services. With extensive QoS capabilities, the S6300 optimizes traffic flow and manages bandwidth efficiently, ensuring high-quality service delivery. Its virtualization support allows for easier integration into modern, software-defined networking environments.

The IP8800/S6600 provides a comprehensive solution for service providers and large enterprises, boasting high scalability and modularity. This model supports advanced features such as network slicing and the ability to handle high-density 100G interfaces. Its robust management tools, including centralized control and automation capabilities, simplify network operations significantly.

Finally, the IP8800/S6700 represents the pinnacle of the series, designed for mission-critical applications requiring the utmost reliability and performance. It supports advanced analytics, AI-driven insights, and comprehensive telemetry, enabling proactive network management. With high availability features and extensive redundancy options, the S6700 ensures continuous operation, making it ideal for core network functions.

In summary, the NEC IP8800 series offers a versatile range of switches that combine advanced technologies, high performance, and robust security features, catering to various networking needs across different industries. Each model is designed to provide not only superior connectivity but also the flexibility and scalability required in today’s fast-paced digital landscape.