NEC IP8800/S6600 No.6, IPv4 access list is applied, Not applied to the port for authentication

Models: IP8800/S6700 IP8800/S3600 IP8800/S6600 IP8800/S6300 IP8800/S2400

1 250
Download 250 pages 34.34 Kb
Page 160
Image 160

3.Troubleshooting Functional Failures in Operation

No.

Troubleshooting Steps and Command

Action

 

 

 

5

Check to see authentication IPv4 access list.

For IP8800/S6700, IP8800/S6600, and IP8800/S6300 models, go to

 

 

No.6.

 

 

For IP8800/S3600 and IP8800/S2400 models, if pre-authenticated

 

 

terminal sends packets out of the system, confirm that authentication

 

 

IPv4 access list is applied.

 

 

If access list and authentication IPv4 access list both are applied to

 

 

the port for authentication, make sure the filter conditions described

 

 

in IPv4 access list are set in the access list as well.

 

 

If communication is established without any authentication, confirm

 

 

that filter condition for permitting packets (such as permit ip any) is

 

 

not applied to the port for authentication.

 

 

Even if the filter condition (deny ip any any) is set to authentication

 

 

IPv4 access list applied to the port for authentication, MAC

 

 

authentication is performed using received ARP packets. If you want

 

 

to put the port out of MAC authentication, you need to disable it by

 

 

using the configuration command no mac-authentication

 

 

port.

 

 

Otherwise, go to No.6.

 

 

 

6

Check to see if statistics information on MAC

If statistics information on MAC authentication is not displayed, go

 

authentication is displayed by the show

to No.7.

 

mac-authentication statistics

Otherwise, go to No.8.

 

command

 

7

Confirm that the setting is completed by the

If the setting is not completed by the configuration command

 

configuration command mac-authentication

mac-authentication system-auth-control, complete

 

system-auth-control.

it.

 

 

Confirm that the port for authentication is correctly configured by

 

 

the configuration command mac-authentication port.

 

 

Confirm that the port for authentication is neither linkdown nor

 

 

shutdown.

 

 

Otherwise, go to No.8.

 

 

 

8

Confirm that actions caused by the show

If terminals have authenticated themselves up to the maximum

 

mac-authentication logging command is

number of lines, you need to wait until other terminal cancel the

 

completed without any problem.

authentication.

 

 

Otherwise, check to see the configuration of MAC authentication.

 

 

 

For the configuration relating to the MAC authentication, check the following:

98

Page 160
Image 160
NEC IP8800/S6600 manual IPv4 access list is applied, Not applied to the port for authentication, Otherwise, go to No.6

IP8800/S6700, IP8800/S3600, IP8800/S6600, IP8800/S6300, IP8800/S2400 specifications

The NEC IP8800 series comprises a range of advanced networking solutions designed for various applications ranging from enterprise networking to service provider environments. This series includes models such as the IP8800/S2400, IP8800/S3600, IP8800/S6300, IP8800/S6600, and IP8800/S6700, each with its unique set of features and capabilities aimed at delivering robust performance, security, and scalability.

The IP8800/S2400 is an entry-level switch tailored for small to medium enterprises. It features a compact design and high port density, making it ideal for network edge applications. The model supports both Layer 2 and Layer 3 switching capabilities, enabling efficient traffic management. With its robust security features, including access control lists and support for VLANs, the IP8800/S2400 ensures secure connectivity.

Moving to the IP8800/S3600, this switch is designed for data center environments and offers high throughput with advanced routing capabilities. It is equipped with high-capacity 10G and 40G Ethernet ports, facilitating faster data transfer rates. The S3600 supports various protocols such as MPLS and Segment Routing, enhancing its ability to manage complex network architectures. Its energy-efficient design also helps reduce operational costs.

The IP8800/S6300 is tailored for high-performance networking scenarios, featuring a flexible architecture that supports both traditional and cloud-based services. With extensive QoS capabilities, the S6300 optimizes traffic flow and manages bandwidth efficiently, ensuring high-quality service delivery. Its virtualization support allows for easier integration into modern, software-defined networking environments.

The IP8800/S6600 provides a comprehensive solution for service providers and large enterprises, boasting high scalability and modularity. This model supports advanced features such as network slicing and the ability to handle high-density 100G interfaces. Its robust management tools, including centralized control and automation capabilities, simplify network operations significantly.

Finally, the IP8800/S6700 represents the pinnacle of the series, designed for mission-critical applications requiring the utmost reliability and performance. It supports advanced analytics, AI-driven insights, and comprehensive telemetry, enabling proactive network management. With high availability features and extensive redundancy options, the S6700 ensures continuous operation, making it ideal for core network functions.

In summary, the NEC IP8800 series offers a versatile range of switches that combine advanced technologies, high performance, and robust security features, catering to various networking needs across different industries. Each model is designed to provide not only superior connectivity but also the flexibility and scalability required in today’s fast-paced digital landscape.