【Problem Description】

There are devices in the customer's networkthat are authenticated by the MAC address and have a static IP address.

Devices do not send anything to the network(they are waiting until they are accessed by users).

When  the device is connected to thenetwork, authentication is successful and  the VLAN number is assigned to theport of connection of the terminal  device.

Problem:

When the MAC table on the access switchdecreases to 0 (deleting the MAC record), the port switches to VLAN 1.

The device is no longer authenticated andtherefore can not be accessed.

【Problem Analysis】

1、Check the Silent host vlan configuration it is in the vlan 200

2、Check the switch configuration we found there is no vlan 200 ip address.

Depend on this if there is no vlanif 200, So the device sends an ARP probe  packet to check the user online status. If the user does not respond  within a detection period, the device considers that the user is offline.

【Root Cause】

Configuration suggest

【Solution Description】

So customer need configuration the access-user arp-detect vlan 200 to detect thesilent host

For more detail please reference:

http://support.huawei.com/hedex/pages/EDOC100017784331189655/05/EDOC100017784331189655/05/resources/dc/access-user_arp-detect.html?ft=0&fe=10&hib=13.1.14.7.2&id=access-user_arp-detect&text=access-user%2520arp-detect&docid=EDOC1000177843