Radius Packet Delivery Failure; Radius Accounting Error; Troubleshooting Hwtacacs - HP FlexNetwork 10500 Series Security Configuration Manual

RADIUS packet delivery failure

Symptom
RADIUS packets cannot reach the RADIUS server.
Analysis
Possible reasons include:
•
A communication failure exists between the NAS and the RADIUS server.
•
The NAS is not configured with the IP address of the RADIUS server.
•
The authentication and accounting UDP ports configured on the NAS are incorrect.
•
The RADIUS server's authentication and accounting port numbers are being used by other
applications.
Solution
To resolve the problem:
1. Check the following items:
The link between the NAS and the RADIUS server work well at both the physical and data
link layers.
The IP address of the RADIUS server is correctly configured on the NAS.
The authentication and accounting UDP port numbers configured on the NAS are the same
as those of the RADIUS server.
The RADIUS server's authentication and accounting port numbers are available.
2. If the problem persists, contact Hewlett Packard Enterprise Support.

RADIUS accounting error

Symptom
A user is authenticated and authorized, but accounting for the user is not normal.
Analysis
The accounting server configuration on the NAS is not correct. Possible reasons include:
•
The accounting port number configured on the NAS is incorrect.
•
The accounting server IP address configured on the NAS is incorrect. For example, the NAS is
configured to use a single server to provide authentication, authorization, and accounting
services, but in fact the services are provided by different servers.
Solution
To resolve the problem:
1. Check the following items:
The accounting port number is correctly configured.
The accounting server IP address is correctly configured on the NAS.
2. If the problem persists, contact Hewlett Packard Enterprise Support.

Troubleshooting HWTACACS

Similar to RADIUS troubleshooting. See "Troubleshooting RADIUS."
66