问题描述：
IMC服务器做了802.1x的radius。
有线802.1x配置没问题，用户可以接入。
无线侧控制器是WX3024E。用户使用iphone接入，输入用户名和密码后，debug提示各种报错。麻烦帮忙分析下。
%Apr 25 11:02:56:027 2019 wx3024e 8021X/6/DOT1X_USER_START: -UserName=0375-IPAddr=0.0.0.0-IfName=WLAN-DBSS1:179-VlanID=302-MACAddr=84:41:67:C9:6A:DC-SSID=dot1x-APMAC=9C:06:1B:22:6E:00-Type=0-NasId=-NasPortId=; User start authentication.
*Apr 25 11:02:56:057 2019 wx3024e 8021X/7/EVENT: Port:WLAN-DBSS1:179,Auth:17,Get Nas-Port-id: ,Nas-Id:
*Apr 25 11:02:56:068 2019 wx3024e 8021X/7/ERROR: The ipaddress is invalid.
*Apr 25 11:02:56:078 2019 wx3024e 8021X/7/EVENT: Port:WLAN-DBSS1:179,Auth:17,Received Msg:0x109,Msg: Continue., Current state:3
*Apr 25 11:02:56:098 2019 wx3024e 8021X/7/EVENT: Port:WLAN-DBSS1:179,Auth:17,Wbas->Wlan message(5) return 1.
*Apr 25 11:02:56:118 2019 wx3024e 8021X/7/EVENT: Auth:17,Processing node EAP relay...
%Apr 25 11:02:56:129 2019 wx3024e PORTSEC/5/PORTSEC_VIOLATION: -IfName=WLAN-DBSS1:179-MACAddr=84:41:67:C9:6A:DC-VlanId=-302-IfStatus=Up; Intrusion detected.
*Apr 25 11:03:00:702 2019 wx3024e 8021X/7/EVENT: Port:WLAN-DBSS1:179,Auth:17,Received Msg:0x1,Msg:EAP-START, Supplicant->Authenticator., Current state:14
%Apr 25 11:03:04:689 2019 wx3024e 8021X/4/DOT1X_USER_ONLINE_FAIL: -UserName=0375-IPAddr=0.0.0.0-IfName=WLAN-DBSS1:179-VlanID=302-MACAddr=84:41:67:C9:6A:DC-SSID=dot1x-APMAC=9C:06:1B:22:6E:00-Type=0-NasId=-NasPortId=-Reason=RADIUS Server No Response; User failed to get online.
[wx3024e] %Apr 25 11:03:04:720 2019 wx3024e PORTSEC/6/PORTSEC_DOT1X_LOGIN_FAILURE: -IfName=WLAN-DBSS1:179-MACAddr=84:41:67:C9:6A:DC-VlanId=302-UserName=0375; The user failed the 802.1X authentication.
%Apr 25 11:03:04:740 2019 wx3024e WMAC/6/WMAC_CLIENT_GOES_OFFLINE: Client 8441-67c9-6adc disconnected from WLAN dot1x. Reason code is 1.
*Apr 25 11:03:04:760 2019 wx3024e 8021X/7/EVENT: Port:WLAN-DBSS1:179,Auth:17,Received Msg:0x105,Msg: Auth request ack for failure, ACM->1X., Current state:14
*Apr 25 11:03:04:780 2019 wx3024e 8021X/7/EVENT: Auth:17,Processing node FAILURE...
*Apr 25 11:03:04:791 2019 wx3024e 8021X/7/EVENT: Port:WLAN-DBSS1:179,Auth:17,Wbas->Wlan message(7) return 1.
*Apr 25 11:03:04:811 2019 wx3024e 8021X/7/ERROR: Auth:17,The user (0375) authentication failed.
*Apr 25 11:03:04:821 2019 wx3024e 8021X/7/EVENT: Port:WLAN-DBSS1:179,Auth:17,Processing node Unauthor action...
*Apr 25 11:03:04:841 2019 wx3024e 8021X/7/EVENT: Auth:17,Sending EAPoL-Failure...
*Apr 25 11:03:04:851 2019 wx3024e 8021X/7/EVENT: Port:WLAN-DBSS1:179,Auth:17,Author info is INVALID, not need unauthor operation. *Apr 25 11:03:04:872 2019 wx3024e 8021X/7/EVENT: Auth:17,Processing node LOGOFF...
[wx3024e] *Apr 25 11:03:04:882 2019 wx3024e 8021X/7/EVENT: Auth:17,ACM resource is released, go release.
*Apr 25 11:03:04:892 2019 wx3024e 8021X/7/EVENT: Auth:17,For Server Unaccessable, go to CRITICAL state.
*Apr 25 11:03:04:902 2019 wx3024e 8021X/7/EVENT: Auth:17,Processing node CRITICAL...
*Apr 25 11:03:04:912 2019 wx3024e 8021X/7/EVENT: Port:WLAN-DBSS1:179,Auth:17,Authenticator is freed.
*Apr 25 11:03:04:922 2019 wx3024e 8021X/7/EVENT: Port:WLAN-DBSS1:179,Auth:17,Notify 1x User offline, reason 0.
*Apr 25 11:03:04:943 2019 wx3024e 8021X/7/EVENT: Auth:17,Authenticatior resource is released.
组网及组网描述：
IMC服务器做的802.1x，radius。
- 2019-04-25提问
- 举报
-
(0)
最佳答案
radius scheme h3c视图下需要加一条配置：server-type extended；
是否配置
使能默认域imc
[AC] domain default enable imc
以及domain是否配置正确。
- 2019-04-25回答
- 评论(2)
- 举报
-
(0)
server-type extended试过了的，看kms上有改成standard成功的案例，才改成了standard模式。 domain是没问题的。使用的是work这个。。。有线也是使用的这个。
%Apr 25 11:03:04:689 2019 wx3024e 8021X/4/DOT1X_USER_ONLINE_FAIL: -UserName=0375-IPAddr=0.0.0.0-IfName=WLAN-DBSS1:179-VlanID=302-MACAddr=84:41:67:C9:6A:DC-SSID=dot1x-APMAC=9C:06:1B:22:6E:00-Type=0-NasId=-NasPortId=-Reason=RADIUS Server No Response; User failed to get online. 从这个日志来看是radius服务器没有回应，是否有AC与radius服务器的抓包，可以排查一下。
亲~登录后才可以操作哦!
确定你的邮箱还未认证，请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
- 1. 您举报的内容是什么？（请在邮件中列出您举报的内容和链接地址）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
- 3. 是哪家企业？（营业执照，单位登记证明等证件）
- 4. 您与该企业的关系是？（您是企业法人或被授权人，需提供企业委托授权书）
抄袭了我的内容
×
原文链接或出处
诽谤我
×
- 1. 您举报的内容以及侵犯了您什么权益？（请在邮件中列出您举报的内容、链接地址，并给出简短的说明）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
对根叔社区有害的内容
×
不规范转载
×
举报说明
%Apr 25 11:03:04:689 2019 wx3024e 8021X/4/DOT1X_USER_ONLINE_FAIL: -UserName=0375-IPAddr=0.0.0.0-IfName=WLAN-DBSS1:179-VlanID=302-MACAddr=84:41:67:C9:6A:DC-SSID=dot1x-APMAC=9C:06:1B:22:6E:00-Type=0-NasId=-NasPortId=-Reason=RADIUS Server No Response; User failed to get online. 从这个日志来看是radius服务器没有回应，是否有AC与radius服务器的抓包，可以排查一下。