H3C MSR3600 dot1x认证问题

通过iNode认证通过以后，获取到地址，过一会儿弹出认证失败

debug信息
Dec 21 18:24:48:779 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: PAE is in Authenticated state: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:779 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: Sent authorization request: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:779 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: AAA processed authorization request: Result= Success, UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:785 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: Sent accounting-start request: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:788 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: Received accounting-start response with code 26: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:791 2017 bj.255XinYongKa.H3C3600A DOT1X/7/PACKET: 
Transmitted a packet on interface GigabitEthernet0/7.
Destination Mac Address=54ee-750c-f8c4
Source Mac Address=1cab-34ce-117e
VLAN ID=20
Mac Frame Type=888e
Protocol Version ID=1
Packet Type=0
Packet Length=4
-----Packet Body-----
Code=4
Identifier=2
Length=4
Dec 21 18:24:48:792 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: PAE is in Aborting state: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:792 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: BE is in Initialize state: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:792 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: PAE is in Disconnect state: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
Dec 21 18:24:48:793 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: BE is in Idle state: UserMAC=54ee-750c-f8c4, VLANID=20, Interface=GigabitEthernet0/7.
%Dec 21 18:24:48:793 2017 bj.255XinYongKa.H3C3600A DOT1X/6/DOT1X_LOGOFF: -IfName=GigabitEthernet0/7-MACAddr=54ee-750c-f8c4-VLANId=20-UserName=739525-ErrCode=14; Session of the 802.1X user was terminated.
Dec 21 18:24:48:793 2017 bj.255XinYongKa.H3C3600A DOT1X/7/EVENT: Interface GigabitEthernet0/7 received DOT1X_PSM_E_USER_UNAUTHORED event.
Dec 21 18:25:12:391 2017 bj.255XinYongKa.H3C3600A DOT1X/7/PACKET: 
Received a packet on interface GigabitEthernet0/7.
Destination Mac Address=0180-c200-0003
Source Mac Address=54ee-750c-f8c4
Mac Frame Type=888e
Protocol Version ID=1
Packet Type=2
Packet Length=0

从debug信息里看到问题是出在计费环节
通过配置
domain aaa
accounting lan-access none命令，使得802.1X终端不做计费。配置后，终端802.1X认证成功，问题解决。

     本文转自杰1992 51CTO博客，原文链接：http://blog.51cto.com/holger/2053648，如需转载请自行联系原作者