Take my hand: Aruba controller - radius authentication debug

2018年8月8日星期三

如果用Aruba controller做radius認證的時候遇到問題，可以在Controller上啟用debug，
接著透過觀察response code的方式查找問題

先啟用debug

(config) # logging level debugging security process authmgr

(config) # logging level debugging security subcat aaa

接著使用裝置認證之後，檢視

show log security 50 找看看如下的訊息

Nov 20 20:14:16 :124003: <INFO> |authmgr| Authentication result=Authentication Successful(0), method=802.1x, server=Aercorone, user=24:77:03:08:53:d0

Nov 20 20:14:16 :124004: <DBUG> |authmgr| Auth server 'Aercorone' response=0

可以看到response=0

透過response可以明白認證過程中發生的問題

請參考以下response code的意義

0 - Auth_OK

1 - Auth_Fail: user/password combination is not correct.

2 - Auth_Timeout: auth request timed out; no response from server.

3 - Internal Error: internal error in auth; should engage engineering.

4 - Bad Response from server: check shared secret.

5 - No Auth Server configured.

6 - Challenge from server: does not necessarily indicate an error condition.

response code來源

Take my hand