How do I check if 802.1x authentication fails?

1.On the AC, run "show version" and "show version all" to check whether the AC and AP firmware versions are stable. If not, upgrade them first. If yes, go to the next step.
Ruijie#show version
Ruijie#show version all

2.ping [server IP] on the AC. If not, check whether the route configuration is correct. If the AC and server are reachable or the authentication fails, go to the next step.
Note: If ip radius source-interface loopback 0 is configured by the AC, it needs to add a source for the ping test. For an example, ping x.x.x.x sour xxxx. The source radius address must be adjusted based on the actual situation. Generally, it is the interface address corresponding to the default route

3."show run" on the AC and log in to the server to check whether the radius key and snmp community are consistent.
Ruijie#show run
radius-server host [Server ip address] key ruijie
snmp-server community ruijie
Note: If the authentication fails despite the correct key configuration, go to the next step.
4. Check whether the network configuration on the terminal computer is correct.



5.Check whether compatibility components are enabled on the server (for SU and SA clients).
Log in to SAM, SMP and ESS to check whether compatibility components are enabled.

6.Check whether the terminal and server are routable (for SU and SA clients).
ping [server IP] source [gateway IP] on the wireless user gateway to check whether the ping server can be successfully pinged. If not, check the route. If the gateway can ping through the server, go to the next step.

7.Verify that the server supports wireless 802.1xauthentication

The information needs to be collected on the AC
1）Information Collection:
      showversion  ---->indicates the AC version
      showversion  all  ---> AP version information
      showrunning   --->indicates AC configuration information
      showap-config run  ---> indicates AP configuration information
      showradius auth statistics  --->indicates radius authentication statistics
      showradius acct statistics  --->indicates radius accounting statistics
      showdot1x   --->802.1x configuration
      showdot1x  summary  --->indicates the 802.1x user information
2) Enable debug on ac, trigger authentication and synchronize packet capture on client and server:
debug aaa event --->debugs aaa events
debug dot1x event --->indicates the debugging of dot1x events
debug dot1x packet --->debug dot1x packet exchange information
3) Operating system of wireless terminal: such as window xp, window 7, Android, blackberry, iphone, etc.
4) 802.1x clients used by wireless terminals, such as SU client, SA client, and windows native client.