所选语种没有对应资源,请选择:

本站点使用Cookies,继续浏览表示您同意我们使用Cookies。Cookies和隐私政策>

提示

尊敬的用户,您的IE浏览器版本过低,为获取更好的浏览体验,请升级您的IE浏览器。

升级
案例库

FAQ-S5720EI配置MAC认证,Display mac-address interface与display mac-authen显示的MAC地址数不一致?

发布时间:  2019-07-15  |   浏览次数:  462  |   下载次数:  0  |   作者:  lWX466267  |   文档编号: EKB1001154886

目录

问题描述

S5720EI配置MAC认证,Display mac-address interface与display mac-authen显示的MAC地址数不一致,如下:


<xxx>display mac-authen
  MAC address authentication is enabled.
  Username format: use MAC address without-hyphen as username
  Quiet period is 60s
  Authentication fail times before quiet is 3
  Offline detect period is 300s
  Reauthenticate period is 60s
  Maximum users: 1024
  Current users: 15
  Global default domain is 360
  Global force domain is not configured
  Global mac-authen force domain is not configured
  Trigger condition: dhcp arp dhcpv6 nd
  Single access is Disabled

 GigabitEthernet0/0/9 state: DOWN.  MAC address authentication is enabled
  Reauthentication is enabled
  Reauthen Period: 60s
  Maximum users: 1024
  Current users: 0      
  Authentication Success: 128, Failure: 78

 GigabitEthernet0/0/24 state: UP.  MAC address authentication is enabled
  Reauthentication is enabled
  Reauthen Period: 60s
  Maximum users: 1024                    
  Current users: 15     
  Authentication Success: 12997, Failure: 6700

 Online user(s) info:
 UserId   MAC/VLAN            AccessTime              UserName
 ------------------------------------------------------------------------------
 69       xxxx-xxxx-6659/22   2017/11/19 22:44:59     xxxxxxxx6659            
 71       xxxx-xxxx-667b/22   2017/11/19 22:44:59     xxxxxxxx667b            
 73       xxxx-xxxx-655f/22   2017/11/19 22:44:59      xxxxxxxx655f            
 74       xxxx-xxxx-6573/22   2017/11/19 22:44:59      xxxxxxxx6573                     
 84      xxxx-xxxx-7e8f/22   2017/11/20 00:43:59      xxxxxxxx7e8f            
 155      xxxx-xxxx-03ce/22   2017/11/20 06:58:47      xxxxxxxx03ce            
 156      xxxx-xxxx-03b4/22   2017/11/20 06:58:47      xxxxxxxx03b4                               
 204      xxxx-xxxx-637b/22   2017/11/20 07:09:04      xxxxxxxx637b            
 205      xxxx-xxxx-6388/22   2017/11/20 07:09:04      xxxxxxxx6388            
 206      xxxx-xxxx-6408/22   2017/11/20 07:09:04      xxxxxxxx6408                       
 209      xxxx-xxxx-428d/22   2017/11/20 07:09:06      xxxxxxxx428d            
 210     xxxx-xxxx-5b8a/22   2017/11/20 07:09:08      xxxxxxxx5b8a            
 211      xxxx-xxxx-63fd/22   2017/11/20 07:09:09      xxxxxxxx63fd            
 212      xxxx-xxxx-6393/22   2017/11/20 07:09:09      xxxxxxxx6393             
 241      xxxx-xxxx-e4d6/22   2017/11/20 09:19:44      xxxxxxxxe4d6            
 ------------------------------------------------------------------------------
 Total: 15, printed: 15

<JHJJ-jiancexian>     display mac-address gi0/0/24
-------------------------------------------------------------------------------
MAC Address    VLAN/VSI                          Learned-From        Type     
-------------------------------------------------------------------------------
xxxx-xxxx-7334 22/-                              GE0/0/24            authen   
xxxx-xxxx-5cb6 22/-                              GE0/0/24            authen   
xxxx-xxxx-d491 22/-                              GE0/0/24            authen   
...
xxxx-xxxx-e4d6 22/-                              GE0/0/24            authen   
xxxx-xxxx-f589 22/-                              GE0/0/24            authen   
xxxx-xxxx-2c41 22/-                              GE0/0/24            authen   

-------------------------------------------------------------------------------
Total items displayed = 24

 


解决方案


以上两个显示结果存在差异,接口下配置MAC认证,使用display mac-authen 查询的对应接口用户数为MAC认证通过的数量;
而使用display mac-address查询的MAC地址数包括认证通过的,和未认证通过的,其中认证通过的类型为authen,未认证通过且学习到终端IP地址的类型也为authen,仅未认证通过且未学习到终端IP地址的类型为pre-authen;