H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 115)

101
[AC-luser-guest] quit
8. Verify the configuration
After you complete the above configuration, wireless clients using the SSID of aabbcc should be able to
pass local EAP authentication and log in as guests before 12:00:00 August 8, 2011.
Troubleshooting AAA
Troubleshooting RADIUS
Symptom 1
User authentication/authorization always fails.
Analysis
1. A communication failure exists between the NAS and the RADIUS server.
2. The username is not in the format of userid@isp-name or the ISP domain for the user authentication
is not correctly configured on the NAS.
3. The user is not configured on the RADIUS server.
4. The password entered by the user is incorrect.
5. The RADIUS server and the NAS are configured with different shared keys.
Solution
Check that:
1. The NAS and the RADIUS server can ping each other.
2. The username is in the userid@isp-name format and the ISP domain for the user authentication is
correctly configured on the NAS.
3. The user is configured on the RADIUS server.
4. The correct password is entered.
5. The same shared key is configured on both the RADIUS server and the NAS.
Symptom 2
RADIUS packets cannot reach the RADIUS server.
Analysis
1. The NAS and the RADIUS server cannot communicate with each other.
2. The NAS is not configured with the IP address of the RADIUS server.
3. The UDP ports for authentication/authorization and accounting are not correct.
4. The port numbers of the RADIUS server for authentication, authorization and accounting are being
used by other applications.
Solution
Check that:
1. The communication links between the NAS and the RADIUS server work well at both physical and
link layers.
2. The IP address of the RADIUS server is correctly configured on the NAS.