3. Troubleshooting Functional Failures in Operation
101
For the configuration relating to the authentication VLAN, check the following.
Table 3-57: Checking Authentication VLAN Configuration
8 Execute the show vlan mac-vlan command
and confirm that the authenticated MAC address is
registered in the MAC VLAN function.
• If the authenticated MAC address is registered by the show vlan
mac-vlan command, authentication for the MAC address is not
enabled. Clear the MAC address registered by the command.
• If the MAC address authenticated for each VLAN is not displayed,
internal conflict has occurred. Restart the authentication VLAN
using the restart vaa command.
• If the authenticated MAC address is not displayed even though the
authentication VLAN is restarted, restart the L2MAC manager
program using the restart vlan command with "mac-manager"
parameter specified.
• Otherwise, go to No. 9.
9 Execute the show fense logging command
and confirm that exchange with the authentication
server is performed.
• If the "The registration of the MAC address failed." log is output by
the show fense logging command, see "4.2.2 Action to Be Taken
When VLAN Identification Table Resource Shortage Occurs."
[IP8800/S6700] [IP8800/S6600] [IP8800/S6300]
Otherwise, check the configuration of the authentication VLAN.
No. Check Point Troubleshooting Steps
1 Setting of authentication VLAN configuration Confirm that the following configuration command is set correctly:
• fense vaa-name
• fense vlan
• fense server
• fense retry-count
• fense retry-timer
• fense alive-timer
2 IP address setting for VLAN interface Confirm that the IP address is set correctly for each VLAN interface:
• Pre-authentication VLAN
• Post-authentication VLAN
• Authentication server VLAN
• VLAN to access
No. Troubleshooting Steps and Command Action