Troubleshooting hwtacacs, Troubleshooting ldap, Radius accounting error – H3C Technologies H3C S12500-X Series Switches User Manual

Page 71

Advertising
background image

59

405B

Solution

Check that:

The link between the NAS and the RADIUS server work well at both the physical and data link
layers.

The IP address of the RADIUS server is correctly configured on the NAS.

The authentication and accounting UDP port numbers configured on the NAS are the same as those

of the RADIUS server.

The RADIUS server's authentication and accounting port numbers are available.

186B

RADIUS accounting error

406B

Symptom

A user is authenticated and authorized, but accounting for the user is not normal.

407B

Analysis

The accounting server configuration on the NAS is not correct. Possible reasons include:

The accounting port number configured on the NAS is incorrect.

The accounting server IP address configured on the NAS is incorrect. For example, the NAS is
configured to use a single server to provide authentication, authorization, and accounting services,

but in fact the services are provided by different servers.

408B

Solution

Check that:

The accounting port number is correctly configured.

The accounting server IP address is correctly configured on the NAS.

28B

Troubleshooting HWTACACS

Similar to RADIUS troubleshooting. See "

747H

Troubleshooting RADIUS

."

29B

Troubleshooting LDAP

409B

Symptom

User authentication fails.

410B

Analysis

Possible reasons include:

A communication failure exists between the NAS and the LDAP server.

The LDAP server IP address or port number configured on the NAS is not correct.

The username is not in the format userid@isp-name, or the ISP domain is not correctly configured on

the NAS.

The user is not configured on the LDAP server.

The password entered by the user is incorrect.

Advertising