Step 8 Check whether a user's MAC address has drifted on the MA5612.
1. In global config mode, run the display location mac-addr command to check multiple
times (more than three times is recommended) whether a MAC address drift occurred on
the port that has learned the user's MAC address.
l If the MAC address drift has occurred, go to Step 8.2.
l If no MAC address drift has occurred, go to Step 9.
NOTE
l The mac-addr parameter in the command indicates the user's MAC address. For user terminal
dialup, the user's MAC address is the MAC address of the user terminal. For PC dialup, the user's
MAC address is the MAC address of the PC.
l The F/S/P parameter in the query result indicates the service port where the user's MAC address
has been learned. Generally, the port displayed in the query result should be the service port of
the user. If the displayed port is not the service port of the user, the user's MAC address has
drifted.
2. Check whether a loop has formed or whether there are user attacks on the port to which the
user's MAC address has drifted. If such a problem occurs, disconnect the loop or deactivate
the port where the user attacks are initiated. Then, perform another dialup check.
l If the dialup is successful, go to Step 14.
l If the dialup fails, go to Step 9.
Step 9 Check whether a BRAS MAC address drift has occurred on the MA5612.
1. Run the display location mac-addr command to check multiple times (more than three
times is recommended) whether a MAC address drift occurred on the port that has learned
the BRAS MAC address.
l If the MAC address drift has occurred, go to Step 9.2.
l If no MAC address drift has occurred, go to Step 10.
NOTE
l The mac-addr parameter indicates the MAC address of the BRAS.
l The F/S/P parameter in the query result indicates the uplink port where the BRAS MAC address
has been learned. Generally, the port displayed in the query result should be the uplink port on
the MA5612 connected to the BRAS. If the displayed port is not the uplink port, the BRAS MAC
address drift has occurred.
2. Check whether a loop has formed or whether there are user attacks on the port to which the
user's MAC address has drifted. If such a problem occurs, disconnect the loop or deactivate
the port where the user attacks are initiated. Then, perform another dialup check.
l If the dialup is successful, go to Step 14.
l If the dialup fails, go to Step 10.
Step 10 Check whether the security configuration on the MA5612 is correct.
1. Run the display security config command to check whether the anti-MAC address
spoofing function is enabled.
l If the function is enabled, go to Step 10.2.
l If the function is not enabled, go to Step 11.
2. Run the display mac-address static command to check whether a static MAC address is
configured on the service port of the user.
NOTE
If a static MAC address and the anti-MAC address spoofing function are configured on a service port
at the same time, the service port user cannot access the Internet.
SmartAX MA5612 Multi-service Access Module
Maintenance Guide 4 Troubleshooting Services Transmitted Through a GE Port
Issue 01 (2012-07-25) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
37
To Next Page
Loading...
