Manuals / NEC / Computer Equipment / Network Hardware

NEC IP8800/S2400, IP8800/S6600, IP8800/S3600 manual Authentication Vlan Failure Analysis Method, 100

Models: IP8800/S6700 IP8800/S3600 IP8800/S6600 IP8800/S6300 IP8800/S2400

1 250
Download 250 pages 34.34 Kb
Page 162
Image 162

3.Troubleshooting Functional Failures in Operation

Table 3-56: Authentication VLAN Failure Analysis Method

No.

Troubleshooting Steps and Command

Action

 

 

 

1

Execute the show logging command and check

• If hardware failures are recorded in the operation log, replace the

 

to see if hardware failures are recorded in the

system.

 

operation log.

• Otherwise, go to No. 2.

 

 

 

2

Execute the show fense server command and

• If error message "Connection failed to VAA program." is displayed,

 

confirm that the system runs normally.

go to No. 8.

 

 

• Otherwise, go to No. 3.

 

 

 

3

Execute the show fense server command and

• If VAA NAME is not set ("-" displayed), the fense vaa-name

 

check the operation status of the authentication

configuration is not set. Set the fense vaa-name configuration.

 

VLAN.

• If "disable" is displayed in Status for each <vaa_id>, the

 

 

authentication VLAN has stopped. Check the configuration.

 

 

• Otherwise, go to No. 4.

 

 

 

4

Execute the show fense server command and

• If "Server Address" indication for each <vaa_id> is different from

 

check the status of connection with the

the IP address of the authentication server or "Port" indication is

 

authentication server.

different from the TCP port number of the authentication server,

 

 

communication with the authentication server is disabled. Check the

 

 

configuration.

 

 

• If other than CONNECTED is displayed in "Agent Status" for each

 

 

<vaa_id>, connection with the authentication server is disconnected.

 

 

Check the authentication server status and settings.

 

 

• Otherwise, go to No. 5.

 

 

 

5

Specify "detail" parameter by the show fense

• If VLAN ID for each <vaa_id> is not displayed or the display

 

server command, and check the setting status of

contents are incorrect, VLAN to be switched over after terminal

 

the fense vlan configuration.

authentication is not provided. Check the configuration.

 

 

• Otherwise, go to No. 6.

 

 

 

6

Execute the show fense statistics

• If "Connect Failure Count" and "Timeout Disconnect Count" for

 

command a few times and check the status of

each <vaa_id> are incremented, connection with the authentication

 

connection with the authentication server.

server is unstable. Check the status of network to the authentication

 

 

server.

 

 

• If the status of network is normal, check that value "alive-time" set

 

 

by the configuration command fense alive-timerand the

 

 

value of parameters set for the authentication server ("HCinterval"

 

 

and "RecvMsgTimeout") are as follows:

 

 

alive-time >= HCinterval + 5

 

 

RecvMsgTimeout >= HCinterval + 5

 

 

• If communication with the authentication server is connected and

 

 

disconnected repeatedly, use the restart vaa command to restart

 

 

the authentication VLAN, VLANaccessController at the

 

 

authentication server, and each function of the authentication VLAN.

 

 

• Otherwise, go to No. 7.

 

 

 

7

Execute the show fense statistics

• If each Request count of "VLANaccessAgent Recv Message"

 

command and confirm that exchange with the MAC

displayed for each <vaa_id> does not match each Request count of

 

VLAN function is performed.

"Terget-VLAN Registration," internal conflict has occurred. Restart

 

 

the authentication VLAN using the restart vaa command.

 

 

• Otherwise, go to No. 8.

 

 

 

100

Page 161 Page 163
Page 162
Image 162
NEC IP8800/S2400, IP8800/S6600, IP8800/S3600, IP8800/S6700, IP8800/S6300 Authentication Vlan Failure Analysis Method, 100
Page 161 Page 163

IP8800/S6700, IP8800/S3600, IP8800/S6600, IP8800/S6300, IP8800/S2400 specifications

The NEC IP8800 series comprises a range of advanced networking solutions designed for various applications ranging from enterprise networking to service provider environments. This series includes models such as the IP8800/S2400, IP8800/S3600, IP8800/S6300, IP8800/S6600, and IP8800/S6700, each with its unique set of features and capabilities aimed at delivering robust performance, security, and scalability.

The IP8800/S2400 is an entry-level switch tailored for small to medium enterprises. It features a compact design and high port density, making it ideal for network edge applications. The model supports both Layer 2 and Layer 3 switching capabilities, enabling efficient traffic management. With its robust security features, including access control lists and support for VLANs, the IP8800/S2400 ensures secure connectivity.

Moving to the IP8800/S3600, this switch is designed for data center environments and offers high throughput with advanced routing capabilities. It is equipped with high-capacity 10G and 40G Ethernet ports, facilitating faster data transfer rates. The S3600 supports various protocols such as MPLS and Segment Routing, enhancing its ability to manage complex network architectures. Its energy-efficient design also helps reduce operational costs.

The IP8800/S6300 is tailored for high-performance networking scenarios, featuring a flexible architecture that supports both traditional and cloud-based services. With extensive QoS capabilities, the S6300 optimizes traffic flow and manages bandwidth efficiently, ensuring high-quality service delivery. Its virtualization support allows for easier integration into modern, software-defined networking environments.

The IP8800/S6600 provides a comprehensive solution for service providers and large enterprises, boasting high scalability and modularity. This model supports advanced features such as network slicing and the ability to handle high-density 100G interfaces. Its robust management tools, including centralized control and automation capabilities, simplify network operations significantly.

Finally, the IP8800/S6700 represents the pinnacle of the series, designed for mission-critical applications requiring the utmost reliability and performance. It supports advanced analytics, AI-driven insights, and comprehensive telemetry, enabling proactive network management. With high availability features and extensive redundancy options, the S6700 ensures continuous operation, making it ideal for core network functions.

In summary, the NEC IP8800 series offers a versatile range of switches that combine advanced technologies, high performance, and robust security features, catering to various networking needs across different industries. Each model is designed to provide not only superior connectivity but also the flexibility and scalability required in today’s fast-paced digital landscape.