1 command for monitor and debug, 1 debug aaa, 2 debug dot1x – Accton Technology ES4626 User Manual
Page 798
798
setted to auto,but switch cann’t be to authenticated state after the user runs 802.1x
supplicant software. Here are some possible causes and solutions:
z
If 802.1x cannot be enabled for a port, make sure the port is not executing Spanning
tree, or MAC binding, or configured as a Trunk port or for port aggregation. To enable
the 802.1x authentication, the above functions must be disabled.
z
If the switch is configured properly but still cannot pass through authentication,
connectivity between the switch and RADIUS server, the switch and 802.1x client
should be verified, and the port and VLAN configuration for the switch should be
checked, too.
z
Check the event log in the RADIUS server for possible causes. In the event log, not
only unsuccessful logins are recorded, but prompts for the causes of unsuccessful
login. If the event log indicates wrong authenticator password, radius-server key
parameter shall be modified; if the event log indicates no such authenticator, the
authenticator needs to be added to the RADIUS server; if the event log indicates no
such login user, the user login ID and password may be wrong and should be verified
and input again.
z
Too frequent access to RADIUS data such as run “show aaa” commands may cause
the user to be unable to pass through the authentication due to RADIUS data share
violation. And the same reason may force users to go offline on re-authentication in
the use. As a result, it is recommended to minimize operation to RADIUS data when
users are authenticating or re-authenticating.
19.5.1 Command for Monitor and debug
19.5.1.1 debug aaa
Command:debug aaa
no debug aaa
Function:
Enables AAA debugging information; the “ no debug aaa” command disables
the AAA debugging information.
Command mode:
Admin Mode
Parameters:
N/A.
Usage Guide
: Enabling AAA debugging information allows the check of RADIUS
negotiation process and is helpful in troubleshooting.
Example
: Enabling AAA debugging information.
Switch#debug aaa
19.5.1.2 debug dot1x
Command: debug dot1x