Huawei Quidway S6500 Series User Manual

Operation Manual - Security
Quidway S6500 Series Ethernet Switches
Chapter 2 AAA and RADIUS Protocol
Configuration
Huawei Technologies Proprietary
2-31
 Note
For the string delivery mode, the VLAN to be delivered must be an existing one on the
switch. That is, you must have created the VLAN and configured a name for it on the
switch. There is no such a restriction for the integer mode.
2.6 AAA and RADIUS Protocol Fault Diagnosis and
Troubleshooting
RADIUS protocol of TCP/IP protocol suite is located on the application layer. It mainly
specifies how to exchange user information between NAS and RADIUS server of ISP.
So it is very likely to be invalid.
z Fault one: User authentication/authorization always fails
Troubleshooting:
1) The username may not be in the userid@isp-name format or NAS has not been
configured with a default ISP domain. Please use the username in proper format
and configure the default ISP domain on NAS.
2) The user may have not been configured in the RADIUS server database. Check
the database and make sure that the configuration information of the user does
exist in the database.
3) The user may have input a wrong password. So please make sure that the
supplicant inputs the correct password.
4) The encryption keys of RADIUS server and NAS may be different. Please check
carefully and make sure that they are identical.
5) There might be some communication fault between NAS and RADIUS server,
which can be discovered through pinging RADIUS from NAS. So please ensure
the normal communication between NAS and RADIUS.
z Fault two: RADIUS packet cannot be transmitted to RADIUS server.
Troubleshooting:
1) The communication lines (on physical layer or link layer) connecting NAS and
RADIUS server may not work well. So please ensure the lines work well.
2) The IP address of the corresponding RADIUS server may not have been set on
NAS. Please set a proper IP address for RADIUS server.
3) UDP ports of authentication/authorization and accounting services may not be set
properly. So make sure they are consistent with the ports provided by RADIUS
server.
z Fault three: After being authenticated and authorized, the user cannot send
charging bill to the RADIUS server.
Troubleshooting:

Huawei Quidway S6500 Series Specifications

General

Brand	Huawei
Model	Quidway S6500 Series
Category	Network Router
Language	English