3. Troubleshooting Functional Failures in Operation99Table 3-54: Checking MAC Authentication ConfigurationFor the configuration relating to the MAC authentication accounting, check the following.Table 3-55: MAC Authentication Failure Analysis Method3.12.4 Communication Failure on Using Authentication VLAN [OP-VAA]For failures that occurred when using the authentication VLAN, isolate the cause according to the table below.No. Check Point Troubleshooting Steps1 Setting of MAC authentication configuration Confirm that the settings by the following configuration commands arecorrect:• aaa accounting mac-authentication defaultstart-stop group radius• aaa authentication mac-authentication defaultgroup radius• mac-authentication password• mac-authentication port• mac-authentication radius-server host• mac-authentication static-vlan max-user• mac-authentication system-auth-control5 Access filter setting for authentication When using IP8800/S3600 or IP8800/S2400 model in static VLANmode, confirm that the filter condition permits pre-authenticatedterminals to send packets out of the system is set by the configurationcommand authentication ip access-group or ipaccess-list extended.No. Check Point Troubleshooting Steps1 Check to see if account has been recorded in theauthentication result.• When authentication status is not displayed by the showmac-authentication login command, see "Table3-53: Failure Analysis Method for MAC Authentication."• If authentication status is not recorded in the accounting server, go toNo.2.• If authentication status is not recorded in the syslog server, go toNo.3.2 Check to see communication status with accountingserver by the show mac-authenticationstatistics command.• When "TxTotal" of [Account frames] indicates 0, confirm the settingby configuration command aaa accountingmac-authentication default start-stop groupradius, radius-server host, ormac-authentication radius-server host is correct.• Otherwise, check the configurations for MAC authentication.3 Check to see the settings of syslog server. Confirm the settings by the following commands are correct.• Confirm syslog server is configured by the logging hostcommand• Confirm "aut" is set as an event kind by the loggingevent-kind command.• Confirm the setting by the mac-authentication loggingenable command is done.
