H3C MSR3600 dot1x认证问题

简介:

通过iNode认证通过以后,获取到地址,过一会儿弹出认证失败

debug信息
Dec 21 18:24:48:779 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: PAE is in Authenticated state: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:779 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: Sent authorization request: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:779 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: AAA processed authorization request: Result= Success, UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:785 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: Sent accounting-start request: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:788 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: Received accounting-start response with code 26: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:791 2017 bj.255XinYongKa.H3C3600A DOT1X/7/PACKET: 
Transmitted a packet on interface GigabitEthernet0/7.
Destination Mac Address=54ee-750c-f8c4
Source Mac Address=1cab-34ce-117e
VLAN ID=20
Mac Frame Type=888e
Protocol Version ID=1
Packet Type=0
Packet Length=4
-----Packet Body-----
Code=4
Identifier=2
Length=4
Dec 21 18:24:48:792 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: PAE is in Aborting state: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:792 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: BE is in Initialize state: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:792 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: PAE is in Disconnect state: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:793 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: BE is in Idle state: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
%Dec 21 18:24:48:793 2017 bj.255XinYongKa.H3C3600A DOT1X/6/DOT1X_LOGOFF: -IfName=GigabitEthernet0/7-MACAddr=54ee-750c-f8c4-VLANId=20-UserName=739525-ErrCode=14; Session of the 802.1X user was terminated.
Dec 21 18:24:48:793 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: Interface GigabitEthernet0/7 received DOT1X_PSM_E_USER_UNAUTHORED event.
Dec 21 18:25:12:391 2017 bj.255XinYongKa.H3C3600A DOT1X/7/PACKET: 
Received a packet on interface GigabitEthernet0/7.
Destination Mac Address=0180-c200-0003
Source Mac Address=54ee-750c-f8c4
Mac Frame Type=888e
Protocol Version ID=1
Packet Type=2
Packet Length=0

从debug信息里看到问题是出在计费环节
通过配置
domain aaa
accounting lan-access none命令,使得802.1X终端不做计费。配置后,终端802.1X认证成功,问题解决。


     本文转自杰1992 51CTO博客,原文链接:http://blog.51cto.com/holger/2053648,如需转载请自行联系原作者




相关文章
|
2月前
|
关系型数据库
500mA High Voltage Linear Charger with OVP/OCP
一、General Description YHM2810 is a highly integrated, single-cell Li-ion battery charger with system power path management for space-limited portable applications. The full charger function features Trickle-charge, constant current fast charge and constant voltage regulation, charge termination, an
17 0
|
4月前
750mA Linear Charger with Power Path Management
​ 一、General Description YHM2711 is a highly integrated, single-cell Li-ion battery charger with system power path management for space-limited portable applications. The full charger function features Trickle-charge, constant current fast charge and constant voltage regulation, charge termination,
24 0
|
7月前
|
安全 网络安全 数据安全/隐私保护
2023HW-8月53个0day,1day汇总含POC、EXP
2023HW-8月(10-15)53个0day,1day汇总含POC、EXP
686 0
|
存储 机器学习/深度学习 算法
Lec3 基于模型的 CF | 学习笔记
快速学习 Lec3 基于模型的 CF 。
108 0
Lec3 基于模型的 CF | 学习笔记
SFP-10G-LRM与SFP-10G-LR光模块的区别
对于多年从事光通信行业的销售来说,只要客户给出一个产品型号,都会知道对应的是什么产品。今天我们将以思科光模块为例,与大家一起学习一下SFP-10G-LRM光模块的相关知识。 什么是SFP-10G-LRM光模块? SFP-10G-LRM光模块是符合10GBase-LRM万兆以太网规范的光模块,具有低成本、低功率、小型化的特点,在实际应用中也十分广泛。
941 0
|
数据安全/隐私保护 内存技术
|
内存技术 数据安全/隐私保护

热门文章

最新文章