After service cutover is performed on the downstream service interface of an ME60, the original users cannot go online.
1. Run the dis access-user interface GigabitEthernet x/x/x.300X command on the ME60 to check that no users go online from the service interface where cutover is performed.
2. Run the dis aaa online-fail-record interface GigabitEthernet 1/1/6.3001 command to check that the user online failure is caused by a RADIUS authentication rejection.
It is doubted that users connected to this service interface are not unbundled on the RADIUS server side.
After users connected to this service interface are unbundled on the RADIUS server side, users can properly go online.
Users connected to this service interface are not unbundled on the RADIUS server side, leading to an authentication failure for the users who attempt to go online from the new interface.