一 故障现象

portal认证开启无感只认证后并且限制用户数，用户认证用户就被占用满，并且发现大量重复用户

二 解决方法

需要与核心交换机配合开启ACG跨三层mac地址学习功能。核心交换机snmp配置以及核心交换机上联ACG、防火墙接口mac地址

1.迈普交换机与防火墙互联vlan100 mac地址查看

HX#sh int vl 100

vlan100:

line protocol is up

Flags: (0xc008063) BROADCAST MULTICAST ARP RUNNING

Type: ETHERNET_CSMACD

Description: to msg400

Internet address: 10.1.0.2/24

Broadcast address: 10.1.0.255

Metric: 0, MTU: 1500, BW: 100000 Kbps, DLY: 100 usec, VRF: global

Reliability 255/255, Txload 1/255, Rxload 1/255

Ethernet address is 0001.7ac3.d0cc

5 minutes input rate 0 bits/sec, 0 packets/sec

5 minutes output rate 0 bits/sec, 0 packets/sec

34133999 packets received; 27081559 packets sent

2422130 multicast packets received

430720 multicast packets sent

4805 input errors; 0 output errors

0 collisions; 0 dropped

Unknown protocol 18

HX#

 

 

2.需要互联地址的mac地址0001.7ac3.d0cc

 

 

3.迈普交换机配置snmp配置案例

Device#configure terminal

Device(config)#snmp-server start

Device(config)#snmp-server view default 1.3.6.1 include

Device(config)#snmp-server community public view default ro

Device(config)#snmp-server community public view default rw

 

迈普交换机配置snmp最终配置

 

Device(config)#snmp-server start

Device(config)#snmp-server view default 1.3.6.1 include

Device(config)#snmp-server community public view default ro

 

配置完毕查看状态

snmp-server start

snmp-server view default 1.2 include

snmp-server view default 1.0.8802 include

snmp-server view default 1.1.2 include

snmp-server view default 1.3.111 include

snmp-server view default 1.3.6.1 include

snmp-server community public view default ro

4.ACG用户同步之SNMP同步配置

5.重复用户问题解决