Got it

need configure the below command to detect the terminal all the time, then it will not be offline.

Latest reply: Dec 31, 2018 14:43:45 535 5 7 0

Problem Description

Our users are facing disconnections to the applications connected whenNAC is applied and also observed gateway is also not reachable during theissue.


Problem Analysis

As today remotesession, we can see all the terminals offline reason is “ARP detect fail” asfollow


<CTS_CHN_T-NAGAR_SW2_4TH_F>dispaaa offline-record all


 ------------------------------------------------------------------------------


  Username             :141877b3cae7


  Domainname           : default


  UserMAC             : 1418-77b3-cae7


  User accesstype      : MAC


  User accessinterface : GigabitEthernet0/0/20


  Qinqvlan/User vlan   : 0/10


  User IPaddress       : 192.168.228.48


  User IPV6address     : FE80::137:70C4:B95B:906C


  UserID              : 550


  User logintime       : 2018/09/28 13:56:41


  Useroffline time     : 2018/09/28 14:43:53


  User offline reason  : ARP detect fail


According to thereason, so we configure the below command

access-userarp-detect vlan 10 ip-address 192.168.228.6 mac-address 0000-0c07-ac0a

Thenthe terminal disconnect(plug-out cable) and connect again, we observe more than10 minutes, didn’t disconnect again, seems fine.

Pleasekeep observing, once any news, please update us.

Another thing, please note: once any fault terminal,please disconnect(plug-out cable) and connect again, then that command can beeffective and issue can be solved.


Root Cause

Once the ip-phonedon’t use for a period of time, the gateway will detect the terminal failed,then make terminal offline, so we can see the offline reason is “ARP detectfail


Solution Description

Once the ip-phonedon’t use for a period of time, the gateway will detect the terminal failed,then make terminal offline. After the period of time, customer want to use theip-phone again, then it will re-authenticateagain. So occurred previous issue.

So we need configurethe below command to detect the terminal all the time, then it will not beoffline.

access-userarp-detect vlan 10 ip-address 192.168.228.6 mac-address 0000-0c07-ac0a

  • x
  • convention:

yjhd
Created Dec 29, 2018 02:11:24 Helpful(0) Helpful(0)




Once the ip-phonedon’t use for a period of time, the gateway will detect the terminal failed,then make terminal offline. After the period of time, customer want to use theip-phone again, then it will re-authenticateagain. So occurred previous issue.




So we need configurethe below command to detect the terminal all the time, then it will not beoffline.




access-userarp-detect vlan 10 ip-address 192.168.228.6 mac-address 0000-0c07-ac0a
View more
  • x
  • convention:

SupperRobin
Created Dec 29, 2018 03:24:26 Helpful(0) Helpful(0)

Once the ip-phonedon’t use for a period of time, the gateway will detect the terminal failed,then make terminal offline, so we can see the offline reason is “ARP detectfail”
View more
  • x
  • convention:

Finn92
Created Dec 29, 2018 03:30:59 Helpful(0) Helpful(0)

Once the ip-phonedon’t use for a period of time, the gateway will detect the terminal failed,then make terminal offline. After the period of time, customer want to use theip-phone again, then it will re-authenticateagain. So occurred previous issue.




So we need configurethe below command to detect the terminal all the time, then it will not beoffline.


View more
  • x
  • convention:

littlestone
Created Dec 29, 2018 11:09:58 Helpful(0) Helpful(0)

ARP (Address Resolution Protocol) is a TCP/IP protocol for obtaining physical addresses based on IP addresses. When the host sends information, it broadcasts the ARP request containing the destination IP address to all hosts on the network and receives the return message to determine the physical address of the target; after receiving the return message, it broadcasts the IP address.
View more
  • x
  • convention:

w1
Created Dec 31, 2018 14:43:45 Helpful(0) Helpful(0)

From this case, i get more new information and solution for such issue, and the solution "access-userarp-detect vlan 10 ip-address xx.xx.xx.xx mac-address xx-xx-xx-xx-xx-xx" are very useful and clear, thanks for your sharing
View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."

My Followers

Login and enjoy all the member benefits

Login

Huawei Enterprise Support Community
Huawei Enterprise Support Community
Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.