FAQ - USG2200 MAC-binding anomaly

Publication Date:  2012-11-28 Views:  110 Downloads:  0
Issue Description
Q:
USG2200 transparent mode V100R002 and V10R005 related versions, configure “firewall mac-binding” anomaly, if hasn’t done “mac-binding”, then this IP address can communicate with USG2200, if has done the “mac-binding”, the IP address can't communicate with USG2200.
Alarm Information
None.
Handling Process
A:
add vid parameter behind “firewall mac-binding x.x.x.x H-H-H”
firewall mac-binding enable
firewall mac-binding x.x.x.x H-H-H vid x
Root Cause
None.
Suggestions
USG2200 V100R002 and V100R005 related versions all exist the fault phenomenon mentioned above, when its working mode is transparent mode, after binding the “IP mac-binding” will be added into the static arp entry, when packets pass through firewall and do layer 2 MAC encapsulation, if it hasn’t configured vid parameter, there will be problems.

END