There are 2-3 packets dropped every 1 minute after 802.1X authentication successfully

Created: Apr 28, 2018 17:52:25Latest reply: May 11, 2018 09:45:45 757 2 0 0
Issue Description

      There are 2-3 packets dropped every 1 minute after 802.1X authentication successfully.

                If no 802.1X authentication, there is no any packet dropped.

                Authentication point is on access switch and the gateway is on core switch as below:

2c2d6aa33d564bc4b9415d19de8d985a

transparent.gif Handling Process

      1. Check the configuration, it is fine.

      2. Check the authentication state and logs , it is fine.

      3. Disable 802.1X on S5700 there is no any packet dropped.

transparent.gif Solution

The device sends an ARP probe packet to check the user online status. If the user does not respond The device sends an ARP probe packet to check the user online status. If the user does not respond within a detection period, the device considers that the user is offline.

If the VLAN to which the user belongs does not have a VLANIF interface or the VLANIF interface does not have an IP address, the device sends an offline detection packet using 255.255.255.255 as the source IP address. If a user cannot respond to an ARP probe packet with the source IP address 255.255.255.255, you can specify a source IP address for the offline detection packet. You are advised to specify the user gateway IP address and its corresponding MAC address as the source IP address and source MAC address of offline detection packets.

configure ARP detection:

                     [huawei]access-user arp-detect default ip-address 0.0.0.0

                       For more details , please refer below:

                      http://support.huawei.com/hedex/pages/EDOC1000135317AEG0221R/04/EDOC1000135317AEG0221R/04/resources/dc/access-user_arp-detect_p.html?ft=0&fe=10&hib=14.1.14.4.6&id=access-user_arp-detect_u&text=access-user%20arp-detect&docid=EDOC1000135317

  • x
  • convention:

yiyi0519  Visitor   Created May 10, 2018 14:10:30 Helpful(0) Helpful(0)

  • x
  • convention:

SupperRobin  Visitor   Created May 11, 2018 09:45:45 Helpful(0) Helpful(0)

:):) good document, thanks
  • x
  • convention:

Reply

Reply
You need to log in to reply to the post Login | Register

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Fast reply Scroll to top