[IAG] Cross-layer 3 is not effective – exclude the cause of incorrect MAC address of the layer 3 switch
Problem Description
The user authentication policy is to set a policy that does not require authentication for some MAC addresses, and other users are not allowed to authenticate, but users cannot authenticate and go online;
Process——
-
Check the authentication policy;

205235d4b1a74d2ce4.png (199.4 KB) -
Check the Mac relationship corresponding to the changed IP in the cross-layer MAC.

326335d4b1ac30744a.png (195.69 KB) -
Compare the MAC addresses excluded in the cross-layer 3 and the MAC addresses of the layer 3 switch on the command console.

185605d4b1b21d3084.png (302.68 KB)
Root cause
The MAC address of the Layer 3 switch is incorrectly filled in, causing the device to still treat the MAC address of the switch as the MAC address of the terminal;
solution
Eliminate the correct MAC address of the Layer 3 switch.
Original Link
https://support.sangfor.com.cn/cases/list?product_id=22&type=1&category_id=7032&isOpen=true