access-user arp-detect control-point mac-ip enable

Function

The access-user arp-detect control-point mac-ip enable command configures the source IP address and source MAC address of detection packets sent by an AS to be the same as those used by an authentication control device for detection.

The undo access-user arp-detect control-point mac-ip enable command cancels the configuration.

By default, the source IP address and source MAC address of detection packets sent by an AS are not configured to be the same as those used by an authentication control device for detection.

Format

access-user arp-detect control-point mac-ip enable

undo access-user arp-detect control-point mac-ip enable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

In policy association and SVF scenarios, you can run this command on an authentication control device to configure the source IP address and source MAC address of detection packets sent by an AS to be the same as those used by the authentication control device for detection, simplifying the configuration on the AS.

Precautions

This command is supported only on authentication control devices.

This function takes effect only for users who go online after this command is successfully configured.

For details about how to configure source addresses of detection packets sent by an authentication control device, see "Setting the Source Address of Offline Detection Packets" in the "NAC Configuration" chapter.

Example

# Configure the source IP address and source MAC address of detection packets sent by an AS to be the same as those used by an authentication control device for detection.

<HUAWEI> system-view
[HUAWEI] access-user arp-detect control-point mac-ip enable