Why the MAC-VLAN does not take effect


MAC address-based VLANs take effect only to untagged packets. If an MAC address-based VLAN does not take effect, check whether the incoming packets contain VLAN tags.

Other related questions:
Why a traffic policy does not take effect on an AR
Pay attention to the following points when configuring a traffic policy so that the traffic policy can take effect: - In a traffic behavior, when the permit action is configured with other actions, the device performs these actions one by one. The deny action cannot be used with other actions (except traffic statistics and traffic mirroring); even if they are configured together, only the deny action takes effect. - When packets are filtered based on an ACL rule, if the rule is configured to permit, the action taken on the packets is decided by the deny or permit action configured in the traffic behavior. If the rule is configured to deny, packets are discarded no matter whether the deny or permit action is configured in the traffic behavior. - A traffic policy that contains the following traffic behaviors can be applied only in the outbound direction of a WAN interface: traffic shaping, adaptive traffic shaping, congestion management, and congestion avoidance. - After fragmentation is configured on an AR, if the rule of the traffic classifier contains the non-first-fragment field, the rate limiting or statistics collection function cannot be configured for the fragmented packets sent to the AR. - If a traffic behavior is bound to an ACL that has no rule configured, the traffic policy referencing the ACL does not take effect.

When does the 802.1x dynamic VLAN take effect
Dynamic VLAN takes effect on port-based authentication, only for access interfaces, or hybrid interface with untagged PVID.

Why the auto-config function does not take effect
V100R005 It takes an unconfigured switch 5 minutes to download a configuration file from the FTP or TFTP server after it starts. You can specify the configuration file for a switch by configuring either of the following: Option 67 Intermediate file If the configuration file is specified by Option 67, the configuration file will take effect a few minutes later. The time depends on the size of the configuration file. If the configuration file is specified in the intermediate file, the configuration file will take effect two hours later. Therefore, if you check the configuration immediately after the switch starts, no configuration is displayed. V100R006-V200R002 In V100R006 and later versions, the auto-config function is enhanced. You can set the delaytime parameter in DHCP Option 146 to specify the delay after which the configuration file takes effect. The delay ranges from 0 to 86400 seconds. For example, if the delay is set to 7200 seconds, the configuration file takes effect 7200 seconds after it is downloaded. Run the display autoconfig-status command to view the current status of the auto-config process and how long will the configuration file take effect. display autoconfig-status Autoconfig is enabled. The current status of autoconfig is finish The status of DHCP phase: Operation result : -- The status of getting system files phase: The mode of getting files: -- Operation result : -- Error reason : -- Vrp File Name : -- Operation result : -- Error reason : -- Pat File Name : -- Operation result : -- Error reason : -- Web File Name : -- Operation result : -- Error reason : -- The status of getting configuration phase: Cfg File Name : -- Operation result : -- Error reason : -- The status of activating configuration phase: Remained time(s) : -- Operation result : -- During the delay, you can run the autoconfig activating-config delay command to change the delaytime value. The autoconfig activating-config delay 0 command makes the configuration file effective immediately. By default, the configuration file takes effect immediately after it is downloaded.

Why does IPSG fail to take effect
The possible causes are as follows: --Invalid binding entries A static binding table is created using the user-bind static command. A dynamic binding table is generated only after the DHCP snooping function is enabled. --IPSG not enabled on the specified interface or VLAN After a binding table is generated, the IPSG function must be enabled in the interface or VLAN view using the ip source check user-bind enable command. IPSG takes effect only on the interface or VLAN where it is enabled, and IPSG check is not performed on the interfaces or VALNs without IPSG enabled. Therefore, if IPSG does not take effect on an interface or in a VLAN, the IPSG function may not be enabled on this interface or in this VLAN. --Insufficient hardware ACL resources The hardware ACL resources are shared by IPSG and other services. If the ACL resources are insufficient, IPSG cannot take effect. For example, you can run the display dhcp static user-bind all verbose command to view the IPSG status corresponding to static binding entries. If the value of IPSG Status is ineffective, IPSG of this entry does not take effect. The possible reason is that hardware ACL resources are insufficient. --Conflict between IPSG and QoS traffic policy This situation may only occur in V1R6C05. When a QoS traffic policy conflicts with IPSG, the traffic behavior in the QoS traffic policy takes effect.

AP load balancing does not take effect
To implement load balancing, the following requirements must be met; otherwise, configurations fail or do not take effect. 1. The requirements for a radio to join a load balancing group are as follows: - A radio can join only one load balancing group. - The newly added radios must be of the same type as other radios in the load balancing group. Radios in a hotspot area must be of the same type. Otherwise, load balancing cannot be achieved. The type of radios in a load balancing group is determined by the type of the first added radio. - The channel of a new radio must be different from channels of other radios in the load balancing group. If the channel of a new radio is the same as channels of other radios in the load balancing group, a radio signal collision occurs. To improve coverage areas and minimize collisions, APs in a hotspot area must be configured with different channels. To detect channel collisions, check the configured channel and actual channel of the radio. - More radios can be added to a load balancing group if it is not full. In a load balancing group, radios must be configured with different channels and all these radios must be of the same type. In addition, radios of the same type support limited and fixed channels. Therefore, the number of radios in a load balancing group is limited. 2. The load balancing function applies to scenarios where there is a high degree of overlapping between APs' coverage ranges. You can adjust the AP power to enable the APs' coverage areas to overlap. When the load difference between APs reaches the load difference threshold, some STAs may access the network slowly, because the APs will reject access requests of STAs according to the load balancing algorithm. If a STA continues to send association requests to an AP, the AP allows the STA to associate when the number of consecutive association attempts of the STA exceeds the maximum number of rejection times.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top