NEC IP8800/S3600, IP8800/S6600 manual Communication Failure on Using Authentication Vlan OP-VAA

3. Troubleshooting Functional Failures in Operation

Table 3-54: Checking MAC Authentication Configuration

No.	Check Point	Troubleshooting Steps
1	Setting of MAC authentication configuration	Confirm that the settings by the following configuration commands are
		correct:
		• aaa accounting mac-authentication default
		start-stop group radius
		• aaa authentication mac-authentication default
		group radius
		• mac-authentication password
		• mac-authentication port
		• mac-authentication radius-server host
		• mac-authentication static-vlan max-user
		• mac-authentication system-auth-control
5	Access filter setting for authentication	When using IP8800/S3600 or IP8800/S2400 model in static VLAN
		mode, confirm that the filter condition permits pre-authenticated
		terminals to send packets out of the system is set by the configuration
		command authentication ip access-group or ip
		access-list extended.

For the configuration relating to the MAC authentication accounting, check the following.

Table 3-55: MAC Authentication Failure Analysis Method

No.	Check Point		Troubleshooting Steps
1	Check to see if account has been recorded in the	•	When authentication status is not displayed by the show
	authentication result.		mac-authentication login command, see "Table
			3-53: Failure Analysis Method for MAC Authentication."
		• If authentication status is not recorded in the accounting server, go to
			No.2.
		• If authentication status is not recorded in the syslog server, go to
			No.3.
2	Check to see communication status with accounting	•	When "TxTotal" of [Account frames] indicates 0, confirm the setting
	server by the show mac-authentication		by configuration command aaa accounting
	statistics command.		mac-authentication default start-stop group
			radius, radius-server host, or
			mac-authentication radius-server host is correct.
		• Otherwise, check the configurations for MAC authentication.
3	Check to see the settings of syslog server.	Confirm the settings by the following commands are correct.
		•	Confirm syslog server is configured by the logging host
			command
		• Confirm "aut" is set as an event kind by the logging
			event-kind command.
		•	Confirm the setting by the mac-authentication logging
			enable command is done.

3.12.4Communication Failure on Using Authentication VLAN [OP-VAA]

For failures that occurred when using the authentication VLAN, isolate the cause according to the table below.

99