Zte ZXR10 2900E Series - Page 292

ZXR102900ESeriesCongurationGuide
confignas
radiusisptestdefaultispenable
radiusisptestsharedsecretamtium
/*SharedkeynegotiatedwithcompanyB*/
radiusisptestaddaccounting10.150.12.101
/*AddressoftheauthenticationandaccountingserverofcompanyB*/
radiusisptestaddauthentication10.150.12.101
/*AddressoftheauthenticationandaccountingserverofcompanyB*/
radiusisptestclient172.16.0.181
/*ISPnameandIPaddressaccessingtheswitch*/
aaa-controlport1-24dot1xenable
aaa-controlport1-24accountingenable
aaa-controlport1-24port-modeauto
Whenthecongurationwascompleted,theauthenticationofsomecomputersinB1,B2
andB3timedout.
FaultAnalysis
Thestudents’accountsandcongurationwerecorrect,andthecongurationoftheZXR10
2900Ewascorrect.EvenifZTE’smaintenanceengineersreplacedthefaultyswitchwith
anewone,theproblemstillexisted.Thediagnosisresultwasthattheinterconnection
betweendevicesofZTEandcompanyBwasfaulty.
Bycapturingpackets,ZTE’smaintenanceengineersfoundthattheZXR102900Esenta
RadiusAccessRequestmessagetotheauthenticationandaccountingserverofcompany
B,butdidnotreceivearesponsemessage.Innormalcircumstance,theRadiusmessage
receivingandsendingprocedureisasfollows:
1.Whentheserveraccessestheswitch,theswitchsendsanAccessRequestmessage.
2.TheserverreturnsanAccessChallengemessage.
3.TheswitchsendsanAccessRequestmessageagain.
4.TheserverreturnsanAccessAcceptmessage.
5.TheswitchsendsanAccountingRequestmessage.
6.TheserverreturnsanAccountingResponsemessage.
BecausetheauthenticationdatapacketowscapturedonthetwosameZXR102900E
deviceswerenotthesame,thediagnosisresultwasthatthecongurationofthe
authenticationandaccountingserverofcompanyBwasincorrect.Engineersofcompany
Bcheckedalarmsontheauthenticationandaccountingserver,andanalarm"APnot
supportuserauthtype”waslocated.Thatis,authenticationtypesoftheserverand
theswitchweredifferent.Whentheback-endcongurationoftheauthenticationand
accountingserverwaschecked,itwasfoundthatthesharedkeyontheswitchesof
buildingsB1,B2andB3wassetto“antium”,butthenegotiatedkeywas"amtium".
7-8
SJ-20130731155059-002|2013-11-27(R1.0)ZTEProprietaryandCondential