MAC Acquisition Across L3 Network Has A Large Delay

|
  • 370
  • 9

Issue Description

The MAC is configured as the authentication policy of the Objects, but the IP address is directly used as the authentication policy of the Objects.

Handling Process

1. Check that the authentication policy with MAC as the Objects has higher priority than the authentication policy with IP as the Objects. If the real MAC address is obtained from the authentication policy, the authentication policy with MAC as the Objects should be matched first.
2. Check the MAC acquisition across L3 network configuration and find it in [Acquired IP/MAC Addresses] Unable to query the MAC address.
3.Check the configuration and find that MAC acquisition across L3 network zone is configured with more than a dozen switches. One of them can’t get the MAC, but it can’t get it with third-party tools. Delete this abnormal, and then check [Acquired IP/MAC Addresses]
The complete MAC address information has been obtained, and the PC can match the authentication policy with MAC as the Objects.

Root Cause

IAM’s MAC acquisition across the L3 network will first traverse all configured Layer 3 switches to fetch the MAC, and then save it to the IAM internal record table. If one is not available, it will be stuck on that switch. In turn, the delay in obtaining the MAC address by the IAM is increased.

Solution

Remove the inaccessible switch in the MAC acquisition across L3 network configuration, or adjust the inaccessible switch to ensure that each Layer 3 switch configured can obtain the MAC address normally.
Blacklist Lv3Posted 11 Mar 2020 18:48
  
thanks for share
elvano Lv3Posted 11 Mar 2020 18:53
  
very easy to read
elvano Lv3Posted 11 Mar 2020 18:54
  
Faisal Posted 17 Oct 2020 10:29
  
Thank you very much for the information ...
Faisal Posted 17 Oct 2020 10:30
  
Nice article ...
Faisal Posted 23 Dec 2020 07:50
  
Great info ...
Ellechar Lv4Posted 12 Jan 2021 09:42
  
Very nice information!!!
Faisal Posted 24 Mar 2021 10:18
  
Very informative …
Faisal Posted 09 Jun 2021 08:15
  
Nice guidance ...

I want to write a case
Doc ID: 2267
Author: Sangfor_SY
Updated: 2019-12-21 12:40
Version: