3 troubleshooting radius authentication, 3 troubleshooting radius authentication -10, 3 troubleshooting radius – Panasonic 8000 User Manual

Page 28: Authentication

Attention! The text in this document has been recognized automatically. To view the original document, you can use the "Original mode".

Advertising
background image

1 AAA troubleshooting

Nortel Secure Router 8000 Series

_________ Troubleshooting - VAS

If PAP mode is not used, check that the PPP link is Up.

# Configure the serial interface on the client side.

[Nortel]

interface Serial 4/0/0

[Nortel-Serial4/0/0]

ip address 9.1.1.1 255.255.255.0

[Nortel-Serial4/0/0]

quit

# Configure the serial interface on the host side.

[Nortel]

interface Serial 1/1/0

[Nortel-Serial1/1/0]

ip address 9.1.1.2 255.255.255.0

[Nortel-Serial1/1/0]

quit

In normal situations, the host can ping through 9.1.1.1. Use the display this interface
command in the interface view to view that Link Control Protocol (LCP) and IP Control
Protocol (IPCP) are “opened.” If the PPP link is Up, continue with the following steps.

Step 2 Check PAP.

Debug PAP on each interface. The following display indicates that PAP is not configured on
the peer and LCP negotiation fails.

%Sep 16 14:01:54 2005 Nortel PPP/5/NEGOTIATEFAIL:Slot=3;Serial3/0/0:0: We want to

negot^iate pap , but the peer doesn't have pap configuration. So LCP negot^iate fai^^, PPP

session wi^ll be closed.

If the PAP link is Up, continue with the following step.

Step 3 Check AAA.

Based on the preceding two steps, you can determine that a problem may exist with AAA. In
this case, check AAA as follows:

1.

Use the display this command in the AAA view to check that the domain nortel exists.

2.

Check if the user type is consistent with that configured in AAA. You can use the
display local-user command in the user interface view.

3.

Check if the authentication scheme of the domain nortel, the default authentication
scheme, or the user-configured authentication scheme is in local authentication mode.

4.

Check if user001 @nortel is configured in the AAA view and the user001 password
agrees with that of the PAP user.

If the fault persists, contact Nortel technical support.

----End

1.3 Troubleshooting RADIUS authentication

This section covers the following topics:

Typical networking

Configuration notes

Troubleshooting flowchart

Troubleshooting procedure

1-10

Nortel Networks Inc.

Issue 01.01 (30 March 2009)

Advertising