OmniSwitch OS6860/OS6900/OS10K Troubleshooting Guide Part No.032996-00 Rev.A
AOS Release 7.X and 8.X January 2015
Alcatel-Lucent Page 117 of 148
Vlan = 21,
Authentication Type = 802.1x,
Authentication Status = Authenticated,
Authentication Failure Reason = -,
Authentication Retry Count = 0,
Authentication Server IP Used = 172.26.61.6,
Authentication Server Used = clearpass,
Server Reply-Message = -,
Profile = clearpass-ep,
Profile Source = Auth - Pass Alternate UNP,
Profile From Auth Server = -,
Classification Profile Rule = -,
Role = -,
Role Source = -,
User Role Rule = -,
Restricted Access = No,
Location Policy Status = -,
Time Policy Status = -,
Captive-Portal Status = -,
QMR Status = Passed,
Redirect Url = -,
SIP Call Type = Not in a call,
SIP Media Type = None,
Applications = None
Total users : 1 Port: 1/1/47
4) Always check also on the server side, you will find most of the log for the issues there :
Example with Clearpass with a test with “test-radius-server” without pap configured :
Error Code: 216
Error Category: Authentication failure
Error Message: User authentication failed
Alerts for this Request
RADIUS Cannot select appropriate authentication method
2015-01-14 11:22:39,160 [Th 37 Req 4 SessId R00000004-01-54b6517e] ERROR
RadiusServer.Radius - rlm_auth_check: Auth-Type not set or authentication methods have not been
configured. Rejecting it.
5) Packet captures can always be useful:
If the logs of the RADIUS server are not helpful, a packet capture between the client and/or the uplink to the
RADIUS server may be useful.
On the client side, check that the client or the switch initiates the EAP session:
If the client initiates the EAP session but doesn’t get a reply, the switch may not have a complete
setup to manage 802.1x.
If the switch initiates the EAP session, but the client does not reply, the client likely does not have a
completely configured 802.1x service (check “Wired AutoConfig” service for Windows).
On the uplink to the server check the exchange between the switch and the RADIUS server. If you can ping the
server but the switch get not reply, you may have a firewall issue, RADIUS uses ports 1812 and 1813 by
default.
To Next Page
Loading...
