【Problem Description】
After login 802.1x authentication, PC lost connection several minutes later.
【Device Version】
S5720 V200R008C00SPC500
Windows 7
【Root Cause】
The device send an ARP probe packet to check the user online status. If the user does not respond within a detection period, the device consider that the user is offline.
If the Service VLAN on the switch does not have a VLANIF interface or the VLANIF interface does not have an IP address, the device will send an offline detection packet 255.255.255.255 as the source IP address. If a user cannot respond the ARP probe packet with the source IP address 255.255.255.255, you can run the access-user arp-detect default ip-address command to specify a default source IP address for the offline detection packet. When window 7 or windows 10, the PC cannot respond to an ARP probe packet with the source IP address 255.255.255.255, it must change it to 0.0.0.0.
【Solution】
Check the issue user offline reason. It display “ARP detect fail”.
Display offline-record mac xxxx-xxxx-xxxx
User name : xxxx
Domain name : radius
User MAC:xxxx-xxxx-xxxx
User access type :802.1x
User access interface :GigabitEthernet 0/0/4
Qinq vlan/User vlan:0/100
User IP address :1.1.1.1
User ID :219
User offline reason : ARP detect fail
Configure “access-user arp-detect default ip-address 0.0.0.0”on S5700.
Access-user arp-detect default ip-address 0.0.0.0



