185
move the user from VLAN 8 to VLAN 3, the authorized VLAN. You can use the display connection
ucibindex command to view the online user information
<Switch> display connection ucibindex 30
Slot: 1
Index=30 , Username=userpt@triple
MAC=0015-e9a6-7cfe
IP=192.168.1.2
IPv6=N/A
Access=PORTAL ,AuthMethod=PAP
Port Type=Ethernet,Port Name=Ethernet1/0/1
Initial VLAN=8, Authorization VLAN=3
ACL Group=Disable
User Profile=N/A
CAR=Disable
Priority=Disable
Start=2009-11-26 17:40:02 ,Current=2009-11-26 17:48:21 ,Online=00h08m19s
Total 1 connection matched.
Use the display mac-vlan all command to view the generated MAC-VLAN entries, which record the MAC
addresses passing authentication and the corresponding VLANs.
[Switch] display mac-vlan all
The following MAC VLAN addresses exist:
S:Static D:Dynamic
MAC ADDR MASK VLAN ID PRIO STATE
--------------------------------------------------------
0015-e9a6-7cfe ffff-ffff-ffff 3 0 D
Total MAC VLAN address count:1
If a client fails authentication, it is added to VLAN 2. Use the previously mentioned commands to view the
assigned IP address and the generated MAC-VLAN entry for the client.
Troubleshooting portal
Inconsistent keys on the access device and the portal server
Symptom
When a user is forced to access the portal server, the portal server displays a blank Web page, rather
than the portal authentication page or an error message.
Analysis
The keys configured on the access device and the portal server are inconsistent, causing CHAP message
exchange failure. As a result, the portal server does not display the authentication page.
Solution
• Use the display portal server command to display the key for the portal server on the access device
and view the key for the access device on the portal server.
• Use the portal server command to modify the key on the access device or modify the key for the
access device on the portal server to make sure that the keys are consistent.
To Next Page
Loading...
Need help?
General