S9300 connecting WLAN AP off-line, S9300 PING AP management address and packet lost
Check on WLAN AC found that AP state banormal.
1、Check by the command disp cpu-defend arp-request statistics slot 5 ,found that ARP packet not much, belong to nomal range；
Check by the command display interface brief, the port traffic is about 5%, exclude ARP attack.
2、Check DHCP SERVER address pool taken situation, 254 address, only 110 be used, remain much, exclude address pool exhausting.
3、It doubt that loop caused MAC flapping. open MAC flapping detection.
System view：[Quidway]loop-detect eth-loop alarm-only
VLAN view：[Quidway -vlan36]loop-detect eth-loop alarm-only
It reported following alarm:L2IFPPI/4/MFLPVLANALARM:OID 18.104.22.168.4.1.2012.3.22.160.3.7 Loop exist in vlan 36, for mac-flapping.
It verified that loop caused mac flapping.
Someone wrong connected the reticle 2 hours before, break the loop and solve the problem.
Off-line AP convergence in one management VLAN, it maybe：
1、User ARP attack caused AP learn arp abnormal in management VLAN and off-line；
2、VLAN address pool exhaust；
3、Loop caused MAC address flapping and AP off-line.
When AP be off-line cosmically, specially in some specific VLAN, besides loop detection configuration, open mac flapping detection function.
Configure on system view：[Quidway]loop-detect eth-loop alarm-only
Configure on VLAN view：[Quidway -vlan36]loop-detect eth-loop alarm-only
It detected flapping alarm, judge that it caused by loop.