Wired Successful Connect SLE

What Does the Wired Successful Connect SLE Measure?

Juniper Mist monitors client connection attempts and identifies failures. This SLE helps you to assess the impact of these failures and to identify the issues to address.

You do not need to set a threshold for this SLE. Juniper Mist assumes a success threshold of 100 percent, meaning that you want all connection attempts to succeed.

Classifiers for Unsuccessful Connection Attempts

When connection attempts are unsuccessful, Juniper Mist classifies the issues as follows.

• Authentication—Each time a client authenticates , a client event is generated. These could either be successful or failed events. This classifier helps you identify issues that caused authentication failures. Here's a list of possible reasons for an 802.1X authentication failure:

  • If a single switch port fails to authenticate, it could be due to a user error or misconfigured port.

  • If all switch ports fail to authenticate, it could be because:

    • The switch is not added as a NAS client in the RADIUS server.
    • A routing issue exists between the switch and the RADIUS server.

    • The RADIUS server is down.

  • If all switch ports on all the switches fail to authenticate, it could indicate a temporary failure with the RADIUS server at that specific moment.

  • If a specific type of device, such as a Windows device, fails to authenticate, it may suggest an issue related to certifications.

• DHCP—Dynamic Host Configuration Protocol (DHCP) snooping enables the switch to examine the DHCP packets and keep track of the IP-MAC address binding in the snooping table. This classifier adds a failure event every time a client connects to a network and fails to reach the ‘bound’ state within a minute.

  NOTE:

  The SLE dashboard shows DHCP failures only for those switches that have DHCP snooping configured.

Example

• Success Rate—On the left, you see that 49 percent of connection attempts were successful.

• Timeline—In the middle, you can drag your mouse to explore this SLE over time. To adjust the scope of the timeline, use the timeline drop-down list at the top of the Monitor page. For example, set the timeline to Today, Yesterday, This Week, or a custom date range.

• Classifiers—On the right, you see a high-level root cause analysis for the unsuccessful connection attempts. All (100 percent) occurred during the Authentication process. None occurred during the DHCP process.