60
Solution
Check that:
• The link between the NAS and the RADIUS server work well at both the physical and data link
layers.
• The IP address of the RADIUS server is correctly configured on the NAS.
• The authentication and accounting UDP port numbers configured on the NAS are the same as those
of the RADIUS server.
• The RADIUS server's authentication and accounting port numbers are available.
RADIUS accounting error
Symptom
A user is authenticated and authorized, but accounting for the user is not normal.
Analysis
The accounting server configuration on the NAS is not correct. Possible reasons include:
• The accounting port number configured on the NAS is incorrect.
• The accounting server IP address configured on the NAS is incorrect. For example, the NAS is
configured to use a single server to provide authentication, authorization, and accounting services,
but in fact the services are provided by different servers.
Solution
Check that:
• The accounting port number is correctly configured.
• The accounting server IP address is correctly configured on the NAS.
Troubleshooting HWTACACS
Similar to RADIUS troubleshooting. See "Troubleshooting RADIUS."
Troubleshooting LDAP
Symptom
User authentication fails.
Analysis
Possible reasons include:
• A communication failure exists between the NAS and the LDAP server.
• The LDAP server IP address or port number configured on the NAS is not correct.
• The username is not in the format userid@isp-name, or the ISP domain is not correctly configured on
the NAS.
• The user is not configured on the LDAP server.
• The password entered by the user is incorrect.