H3C MSR3600 dot1x認證問題

通過iNode認證通過以後,獲取到地址,過一會兒彈出認證失敗

debug信息
Dec 21 18:24:48:779 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: PAE is in Authenticated state: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:779 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: Sent authorization request: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:779 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: AAA processed authorization request: Result= Success, UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:785 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: Sent accounting-start request: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:788 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: Received accounting-start response with code 26: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:791 2017 bj.255XinYongKa.H3C3600A DOT1X/7/PACKET:
Transmitted a packet on interface GigabitEthernet0/7.
Destination Mac Address=54ee-750c-f8c4
Source Mac Address=1cab-34ce-117e
VLAN ID=20
Mac Frame Type=888e
Protocol Version ID=1
Packet Type=0
Packet Length=4
-----Packet Body-----
Code=4
Identifier=2
Length=4
Dec 21 18:24:48:792 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: PAE is in Aborting state: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:792 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: BE is in Initialize state: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:792 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: PAE is in Disconnect state: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:793 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: BE is in Idle state: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
%Dec 21 18:24:48:793 2017 bj.255XinYongKa.H3C3600A DOT1X/6/DOT1X_LOGOFF: -IfName=GigabitEthernet0/7-MACAddr=54ee-750c-f8c4-VLANId=20-UserName=739525-ErrCode=14; Session of the 802.1X user was terminated.
Dec 21 18:24:48:793 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: Interface GigabitEthernet0/7 received DOT1X_PSM_E_USER_UNAUTHORED event.
Dec 21 18:25:12:391 2017 bj.255XinYongKa.H3C3600A DOT1X/7/PACKET:
Received a packet on interface GigabitEthernet0/7.
Destination Mac Address=0180-c200-0003
Source Mac Address=54ee-750c-f8c4
Mac Frame Type=888e
Protocol Version ID=1
Packet Type=2
Packet Length=0

從debug信息裏看到問題是出在計費環節
通過配置
domain aaa
accounting lan-access none命令,使得802.1X終端不做計費。配置後,終端802.1X認證成功,問題解決。

發表評論
所有評論
還沒有人評論,想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章