Why is a user not displayed as Online on the RADIUS server after the user succeeds in S series switch authentication

20

In general, the RADIUS server identifies whether users are online by determining whether the accounting function is enabled rather than whether the user performs the authenticating operation. If a user succeeds in authentication but does not perform accounting, the RADIUS server considers that the user is offline. Therefore, check whether the accounting function is correctly enabled in the scenario where the accounting function is applied.

Other related questions:
Why is a user not displayed as online on the RADIUS server after the user succeeds in authentication
The RADIUS server judges whether a user is online by the enabling of the accounting function rather than the success of authentication. If the user succeeds in authentication but does not perform accounting, the RADIUS server considers that the user is offline. Therefore, check whether the accounting function is correctly enabled in the scenario where the accounting function is applied.

Local and remote RADIUS or HWTACACS authentication is configured on an S series switch. When the remote authentication server does not respond, local users cannot log in and the message "aaa user cut" is displayed. Why
Users fail to log in because accounting fails. The S series switch is configured with authentication and accounting, but does not support accounting. To solve the problem, run the following command to configure the switch to keep users online after accounting fails. [HUAWEI] aaa [HUAWEI-aaa] accounting-scheme scheme1 [HUAWEI-aaa-accounting-scheme1] accounting start-fail online

Prevent users failing RADIUS authentication from logging in to S series switches
Administrative users can log in to S series switches (except S1700 switches) after they pass the RADIUS authentication. Their user accounts are configured on the remote RADIUS server but not in the AAA view of a local switch. The methods of configuring switches to allow administrative users to log in after they pass the RADIUS authentication are similar.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top