Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document.
Note: Even the most advanced machine translation cannot match the quality of professional translators.
Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Case Study: STA Authentication Fails Due to Incomplete Authentication Profile Configuration
Symptom
When external Portal authentication and RADIUS authentication are configured on the AC, STAs fail Portal authentication.
Relevant Alarms and Logs
None
Cause Analysis
No RADIUS server template is bound to the authentication profile on the AC, and the configuration is incomplete.
Procedure
- Use the trace function to check the STA authentication process.
[AC] trace object mac-address sta-mac [AC] trace enable
Based on the error message, it is suspected that the authentication profile is incorrectly configured.
[BTRACE][2020/10/20 14:40:14][AAA][sta-mac]:User authentication domain name is [BTRACE][2020/10/20 14:40:14][AAA][sta-mac]:The authentication place is RADIUS. [BTRACE][2020/10/20 14:40:14][AAA][sta-mac]:Authentication fail [BTRACE][2020/10/20 14:40:14][AAA][sta-mac]:[AAA ERROR]authen finish,the authen fail reason is:45
- Check the configuration in the authentication profile. It is found that the RADIUS server template is not referenced.
<AC> system-view [AC] authentication-profile name portal_authen_profile [AC-authentication-profile-portal_authen_profile] display this # authentication-profile name portal_authen_profile portal-access-profile portal_authen_profile free-rule-template default_free_rule authentication-scheme 123
- After the RADIUS server template is correctly referenced in the authentication profile, the problem is resolved.
[AC-authentication-profile-portal_authen_profile] radius-server xxx