The WLAN service of a college uses the self-built AC and manages APs in centralized forwarding mode. The AC is connected to the carrier's ME60, and the ME60 is connected to the RADIUS server for authentication. The networking diagram is as follows:
In this networking, the AC manages APs in a centralized manner through VLAN management. After a user is associated with an AP, service traffic is transparently transmitted to the ME60 over the AC. The ME60 exchanges packets with the RADIUS server for authentication.
The authentication page fails to be displayed for wireless users.
1. Check wireless signals on site and perform tests on different terminals. It is found that the authentication page is not displayed for all the tested terminals.
2. On the ME60, check the interconnection with the portal server.
It is found that the communication between the ME60 and portal server is normal.
3. Check the configuration and traffic policy on the ME60.
Global traffic policies are matched from top to bottom. For the last two traffic behaviors, the traffic of WLAN users is rejected. Therefore, the authentication page is not displayed.
Global traffic policies are matched from top to bottom. The traffic of WLAN users for the traffic behavior shown in the preceding figure is rejected. Therefore, the authentication page is not displayed
Exchange the positions of the two traffic behaviors, as shown in the following figure.
The test succeeds, and the authentication page can be properly displayed for user access.
For the same configuration, different configuration orders also lead to service interruptions.