Got it
Huawei Enterprise Support Community
Community Forums Routing & Switching
[802.1x] S5720-52X-PWR-SI...

[802.1x] S5720-52X-PWR-SI-AC PROBLEM

Created: Dec 21, 2016 19:24:05Latest reply: Sep 21, 2018 04:59:04 3123 10 0 0 0
  Rewarded HiCoins： 0 (problem resolved)
View the author 1#
Hi Guys


I made all 802.1x configuration in our switches and it's work fine but I found an perhaps that will try to explain:

PC1 is connected to gigabit 0/0/1 and authenticated.
PC1 is disconnected from that port and another device(PC2) is connected there and doesn't authenticate but the device is able to get the same VLAN that PC1 got when authenticated.

If I connect PC2 to another port, the authentication will fail and the guest vlan will be served as expected.

Why it's happening ?

Tks

Luiz Ricardo

Like (0) Dislike (0) Favorite(0) Share Report
Previous: CE6810-32T16S4Q-LI, power modules and fan box.
Next: S5700 unable to create multiple VLAN interfaces
Featured Answers

Best answer

(0) (0)
Sergio93
Created Sep 21, 2018 04:59:04

Hello,

Please do some test with following recommendations:
1) try to use the access control on an interface to be based on MAC addresses. In your case, when the port method is used, all the other 802.1X users on an interface can use network resources as long as one user is authenticated successfully. When the authenticated user goes offline, other users cannot use network resources. The port method is applicable to group users.
When the mac method is used, all 802.1X users on an interface are authenticated one by one. If a user goes offline, other users on this interface are not affected. The mac method is applicable to individual users.
<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] dot1x port-method mac

2)specify the user gateway IP address and its corresponding MAC address as the source IP address and source MAC address of offline detection packets. You can find them with 'display interface' command.
<HUAWEI> system-view
[HUAWEI] access-user arp-detect vlan 10 ip-address 192.168.1.1 mac-address 2222-1111-1234

View more
  • x
  • convention：
All Answers
(0) (0)
2#
icycan
icycan Created Dec 22, 2016 02:07:21

I'm sorry.I've never used this device.Will someone to help you, good luck!
View more
  • x
  • convention：
(0) (0)
3#
negoluiz
negoluiz Created Dec 23, 2016 12:17:39

Waiting a help from someone!
View more
  • x
  • convention：
(0) (0)
4#
gululu
gululu Created Dec 24, 2016 06:28:27

@Lemon @kmyd @撒么 please help
View more
  • x
  • convention：
(0) (0)
5#
negoluiz
negoluiz Created Dec 26, 2016 12:15:33

Posted by 咕噜噜 at 2016-12-24 06:28 @Lemon @kmyd @撒么 please help
Please help, guys!
View more
  • x
  • convention：
(0) (0)
6#
ogh
ogh Created Dec 30, 2016 15:43:43

Do can you post the port configuration??
View more

Rating

Number of participants 1E-coins +2 Collapse Reasons
社区管理员咕噜噜 + 2 Awesome!

View All scores

  • x
  • convention：
(0) (0)
7#
negoluiz
negoluiz Created Jan 2, 2017 12:09:02

Posted by ogh at 2016-12-30 15:43 Do can you post the port configuration??
Hi @ogh

Here is..

dot1x enable
dot1x authentication-method eap
dot1x timer tx-period 10

undo authentication unified-mode

interface GigabitEthernet0/0/1
port link-type access
port default vlan 20
stp edged-port enable
dot1x enable
dot1x max-user 1
authentication guest-vlan 50
dot1x port-method port
dot1x authentication-method eap
#

Tks
View more
  • x
  • convention：
(0) (0)
8#
negoluiz
negoluiz Created Jan 4, 2017 16:02:36

@ogh hello buddy.. please help me! tks
View more
  • x
  • convention：
(0) (0)
9#
negoluiz
negoluiz Created Jan 23, 2017 12:05:40

Nobody ?? :D:D[802.1x] S5720-52X-PWR-SI-AC PROBLEM-2175761-1
View more
  • x
  • convention：
(0) (0)
10#
Martian_superman
Martian_superman Created Sep 15, 2018 15:56:10

Maybe the access-user records is not deleted, you can contact Huawei TAC so that Huawei engineer can assist you on the troubleshooting.
View more
  • x
  • convention：
12
Back to list

Comment

Advanced
B Color Image Link Quote Code Smilies
You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login
Huawei Website Support About Huawei Privacy User Agreement Terms of Use Cookies Cookie Settings
Huawei Enterprise Huawei Carrier Forum Training & Certification

Contact Us: e_online@huawei.com Copyright © 2022 Huawei Technologies Co., Ltd. All rights reserved.

APP

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.