3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide

62 CHAPTER 4: AAA AND RADIUS/HWTACACS PROTOCOL CONFIGURATION
Step 2: Choose to use the winkey.exe calculator to get the login password at the
prompt "s/key 89 gf55236".
Figure 13 Calculate login password
In the above figure:
Type the prompt "89 gf55236" in the Challenge field.
Type the private password (test for example) in the Password field.
The Response field outputs the calculation result, that is, the password you need
to type in the login interface.
Step 3: Type the calculated password in the login interface and you are authorized
to access.
Troubleshooting AAA
and
RADIUS/HWTACACS
Protocols
Troubleshooting the
RADIUS Protocol
The RADIUS protocol of the TCP/IP protocol suite is located at the application layer.
It mainly provisions how to exchange user information between a NAS and a
RADIUS server of an ISP. So it is very likely to get invalid.
■ Symptom 1: User authentication/authorization always fails
Troubleshooting:
Check that:
1 The username is in the userid@isp-name format or a default ISP domain is
specified on the NAS.
2 The user exists in the database on the RADIUS server.
3 The password input by the user is correct.
4 The same shared key is configured on both the RADIUS server and the NAS.
5 The NAS can communicate with the RADIUS server (by pinging the RADIUS server).
■ Symptom 2: RADIUS packets cannot reach the RADIUS server.
Troubleshooting: