Wake-on-LAN

Hello,

As I understand, dot1x/MAC-authen just controls the inbound direction, it doesn't control the outbound direction, so by default, the broadcast traffic or unknown-unicast traffic can be sent out even if the user doesn't start the authentication.

And we also have a command to control the direction, by default, authentication just control the inbound packets.

 authentication control-direction

Function

The authentication control-direction command configures the direction of traffic controlled by the device.

By default, the device only controls the upstream traffic.

There is no other specific configuration, just enable the interface to forward directed broadcast packets using the 'IP forward-broadcast' command.

<HUAWEI> system-view

[HUAWEI] interface vlanif 100

[HUAWEI-Vlanif100] IP forward-broadcast