Appendix A:Troubleshooting a WSS 777
Nortel WLAN—Security Switch 2300 Series Configuration Guide

Tracing authorization activity

Tracing authorization activity can help diagnose authorization problems. For example, to trace the authorization of MAC
address 00:00:30:b8:72:b0, type the following command:
WSS# set trace authorization mac-addr 00:00:30:b8:72:b0
success: change accepted.

Tracing 802.1X sessions

Tracing 802.1X sessions can help diagnose problems with wireless clients. For example, to trace 802.1X activity for user
tamara@example.com at level 4, type the following command:
WSS# set trace dot1x user tamara@example.com level 4
success: change accepted.

Displaying a trace

Use the show trace command to show the trace areas that are enabled. For example, to display all currently running
trace commands, type the following command:
WSS# show trace
milliseconds spent printing traces: 31.945
Trace Area Level Mac User Port Filter
---------------- -------------- -------- --------------
authentication 3 admin 0
authorization 5 0
sm 5 11 0
dot1x 2 0

Stopping a trace

The clear trace commands deletes running trace commands. To clear all traces or a particular trace area, type the
following command:
clear trace {all | trace area}
(For a list of all areas that can be traced, see “List of trace areas” on page 780.)
For example, to stop a trace of session manager activity, type the following command:
WSS# clear trace sm
success: change accepted.

About trace results

The trace commands use the underlying logging mechanism to deliver trace messages. Trace messages are generated
with the debug severity level. By default, the only log target that receives debug-level messages is the volatile trace
buffer. (To see the contents of the trace buffer, see “Displaying trace results” on page 778.)