Case Study: STA Authentication Fails Because the Portal Server IP Address Specified on the AC Is Different from the Actual IP Address of the Portal Server
Symptom
When the AC connects to a third-party Portal server, STAs fail Portal authentication.
Relevant Alarms and Logs
None
Cause Analysis
The Portal server IP address specified on the AC is different from the actual IP address of the Portal server.
Procedure
- Check the STA authentication process using the trace function.
[AC] trace object mac-address sta-mac [AC] trace object ip-address y.y.y.y [AC] trace enable
A message is displayed, indicating that the source IP address of packets sent by the Portal server and the server IP address configured on the AC are not configured.
[BTRACE][WEB][y.y.y.y]:Received packet from socket (length = 61 Vrf = 0): Version : 2 Type : authentication request Method : pap [BTRACE][WEB][y.y.y.y]:WEB receive packet from portal server successfully. [BTRACE][WEB][y.y.y.y]:[WEB Proc PS Msg] Server IP = z.z.z.z, Server Vrf = 0 [BTRACE][WEB][y.y.y.y]: Failed to process packet for portal server,because server IP does not config.(serverIP=z.z.z.z)
- Change the IP address of the Portal server on the AC to be the same as the source IP address of packets sent by the Portal server. The problem is resolved.
<AC> system-view [AC] web-auth-server test [AC-web-auth-server-test] server-ip z.z.z.z