Case Study: STA Authentication Fails Because the Shared Keys Configured on the AC and Portal Server Are Different
Symptom
When the AC connects to a third-party Portal server, STAs fail Portal authentication.
Relevant Alarms and Logs
None
Cause Analysis
The shared keys configured on the Portal server and AC are different.
Procedure
- Check the STA authentication process using the trace function.
[AC] trace object mac-address sta-mac [AC] trace object ip-address sta-ip [AC] trace enable
A message is displayed, indicating that the shared key configured on the Portal server must be the same as that configured on the AC.
[BTRACE][2020/11/11 14:27:52][4864][WEB][y.y.y.y]:Received packet from socket): Version : 2 Type : information request Method : pap UserIP : y.y.y.y [BTRACE][2020/11/11 14:27:52][4864][WEB][y.y.y.y]:[WEB Proc PS Msg] Server IP = 10.1.1.3 [BTRACE][2020/11/11 14:27:52][4864][WEB][y.y.y.y]: The shared-key configured on the device must be the same as the one configured on the portal server.
- Configure the same shared key on the AC and Portal server. The problem is rectified.
<AC> system-view [AC] web-auth-server test [AC-web-auth-server-test] shared-key cipher test@123