NEC IP8800/S6300, IP8800/S6600, IP8800/S3600 Communication Failure on Using MAC Authentication

3. Troubleshooting Functional Failures in Operation

3.12.3Communication Failure on Using MAC Authentication

For MAC authentication failure, isolate the problem according to the failure analysis method described in "Table 3-53: Failure Analysis Method for MAC Authentication."

For confirming Web authentication configuration and accounting information, isolate the problem according to the failure analysis method described in "Table 3-54: Checking MAC Authentication Configuration" and "Table 3-55: MAC Authentication Failure Analysis Method."

Table 3-53: Failure Analysis Method for MAC Authentication

No.	Troubleshooting Steps and Command	Action
1	Check to see if the terminal can communicate.	• If authentication in Local authentication method failed, go to No. 2.
		• If authentication in RADIUS authentication method failed, go to
		No.3.
		• Otherwise, go to No.5.
2	Check to see if MAC address and VLAN ID are	• If MAC address is not registered yet, set MAC address and VLAN
	registered by the show mac-authentication	ID by the set mac-authentication mac-address
	mac-address command.	command.
		• Otherwise, go to No. 5.
3	Check to see the status of communication with	• When "TxTotal" of [Account frames] indicates 0, confirm all of the
	RADIUS server by the show	settings by configuration commands (aaa accounting
	mac-authentication statistics	web-authentication default start-stop group
	command.	radius, radius-server host, and
		mac-authentication radius-server host) are correct.
		• For IP8800/S3600 and IP8800/S2400 models, even though the dead
		interval lets RADIUS server get recovered from no-response state
		and become able to communicate, the system is not able to collate
		with the RADIUS server during a period of time specified by
		configuration command authentication radius-server
		dead-interval. As a result, an authentication error occurs.
		In this case, if the period of time is too long for the system to wait for
		an authentication error response, change the set value of
		configuration command authentication radius-server
		dead-interval or execute the clear
		web-authentication dead-interval-timer command.
		Authentication action against the first RADIUS will be taken again.
		• Otherwise, go to No. 4.
4	Check to see if MAC address and password are	• If MAC address has not been registered as a User ID for RADIUS
	registered in RADIUS server.	Server yet, register it.
		• If you use MAC address as a password, set the same value as in MAC
		address.
		• Once you registered common values to the RADIUS servers as a
		password, check to see if the password is the same as one registered
		by the configuration command mac-authentication
		password.
		• Otherwise, go to No.5.

97