Filter
Top Products
3. Troubleshooting Functional Failures in Operation
95
Table 3-51: Checking Web Authentication Configuration
No. Check Point Troubleshooting Steps
1 Setting of Web authentication configuration Confirm that the following configuration commands are set correctly:
<common setting>
• aaa accounting web-authentication default
start-stop group radius
• aaa authentication web-authentication default
group radius
• web-authentication system-auth-control
<when dynamic vlan mode is set>
• web-authentication auto-logout
• web-authentication max-timer
• web-authentication max-user
• web-authentication vlan
<when static vlan mode is set>
• web-authentication ip address
• web-authentication port
• web-authentication static-vlan max-user
• web-authentication web-port
When you use IP8800/S3600 or IP8800/S2400, confirm the settings by
using the following commands.
• authentication arp-relay
• authentication ip access-group
• web-authentication redirect enable
• web-authentication redirect-mode
2 IP address setting for VLAN interface Using dynamic vlan mode, confirm that the IP address is correctly set
to each VLAN interface:
• Pre-authentication VLAN
• Post-authentication
3 Setting of DHCP relay agent When using the external DHCP server and L3 switches in dynamic vlan
mode, check that DHCP relay agent between the following VLANs is
set correctly.
• Between pre-authentication VLAN and server VLAN
• Between post-authentication VLAN and server VLAN
4 Filter setting When using L3 switches in dynamic vlan mode, confirm that the
following inter-VLAN filter is set correctly.
• Between pre-authentication VLAN and post-authentication VLAN:
Set the filter to disable all IP communications.
• Between post-authentication VLAN and pre-authentication VLAN:
Set the filter to relay Web browser communication only.
Certain packets may have been discarded by filtering, or packets may
have been discarded through bandwidth monitoring, discarding control,
or shaper of the QoS control.
Check to see if the conditions of filtering and QoS control in the
configuration have been set up correctly and if bandwidth monitoring,
discarding control, or shaper has been set up appropriately for system
operation. For the procedure, see "3.23.1 Checking Filtering/QoS
Setting Information."