Filter
Top Products
3. Troubleshooting Functional Failures in Operation
96
For the configuration relating to the Web authentication accounting, check the following.
Table 3-52: Web Authentication Failure Analysis Method
5 Check to see the access filter setting for
authentication.
When using IP8800/S3600 or IP8800/S2400 model in static VLAN
mode, confirm that the filter condition permits pre-authenticated
terminals to send packets out of the system by the configuration
command authentication ip access-group or ip
access-list extended.
6 Check to see the ARP relay setting. When using IP8800/S3600 or IP8800/S2400 model in static VLAN
mode, confirm that the setting permits pre-authenticated terminals to
send packets out of the system by the configuration command
authentication arp-relay.
No. Troubleshooting Steps and Command Action
1 Check to see if account has been recorded after
authentication.
• When authentication status is not displayed by the show
mac-authentication login command, see "Table
3-50: Failure Analysis Method for Web Authentication."
• If authentication status is not recorded in the accounting server, go to
No.2.
• If authentication status is not recorded in the syslog server, go to
No.3.
2 Check to see communication status with accounting
server by the show web-authentication
statistics command.
• When "TxTotal" of [Account frames] indicates 0, check to see if the
setting by configuration command aaa accounting
web-authentication default start-stop group
radius or radius-server host is correct.
• Otherwise, check the configurations for Web authentication.
3 Check to see the settings of syslog server. Confirm the settings by the following commands are correct.
• Confirm that syslog server is configured by the logging host
command.
• Confirm that "aut" is set as an event kind by the logging
event-kind command.
• Confirm that the logging is enabled by the
web-authentication logging enable command.
No. Check Point Troubleshooting Steps