H3C MSR3600 dot1x认证问题

原创

杰1992 2017-12-22 16:13:35 博主文章分类：H3C ©著作权

©著作权归作者所有：来自51CTO博客作者杰1992的原创作品，请联系作者获取转载授权，否则将追究法律责任

通过iNode认证通过以后，获取到地址，过一会儿弹出认证失败

debug信息 *Dec 21 18:24:48:779 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: PAE is in Authenticated state: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7. *Dec 21 18:24:48:779 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: Sent authorization request: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7. *Dec 21 18:24:48:779 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: AAA processed authorization request: Result= Success, UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7. *Dec 21 18:24:48:785 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: Sent accounting-start request: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7. *Dec 21 18:24:48:788 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: Received accounting-start response with code 26: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7. *Dec 21 18:24:48:791 2017 bj.255XinYongKa.H3C3600A DOT1X/7/PACKET: Transmitted a packet on interface GigabitEthernet0/7. Destination Mac Address=54ee-750c-f8c4 Source Mac Address=1cab-34ce-117e VLAN ID=20 Mac Frame Type=888e Protocol Version ID=1 Packet Type=0 Packet Length=4 -----Packet Body----- Code=4 Identifier=2 Length=4 *Dec 21 18:24:48:792 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: PAE is in Aborting state: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7. *Dec 21 18:24:48:792 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: BE is in Initialize state: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7. *Dec 21 18:24:48:792 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: PAE is in Disconnect state: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7. *Dec 21 18:24:48:793 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: BE is in Idle state: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7. %Dec 21 18:24:48:793 2017 bj.255XinYongKa.H3C3600A DOT1X/6/DOT1X_LOGOFF: -IfName=GigabitEthernet0/7-MACAddr=54ee-750c-f8c4-VLANId=20-UserName=739525-ErrCode=14; Session of the 802.1X user was terminated. *Dec 21 18:24:48:793 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: Interface GigabitEthernet0/7 received DOT1X_PSM_E_USER_UNAUTHORED event. *Dec 21 18:25:12:391 2017 bj.255XinYongKa.H3C3600A DOT1X/7/PACKET: Received a packet on interface GigabitEthernet0/7. Destination Mac Address=0180-c200-0003 Source Mac Address=54ee-750c-f8c4 Mac Frame Type=888e Protocol Version ID=1 Packet Type=2 Packet Length=0

从debug信息里看到问题是出在计费环节通过配置 domain aaa accounting lan-access none命令，使得802.1X终端不做计费。配置后，终端802.1X认证成功，问题解决。