Does the active/standby switchover of hot backup management boards affect the authenticated services? Can the non-authenticated user successfully pass the authentication and get online? - Ruijie Community

1) In dual-management board deployment mode, if the active and standby management boards are switched over (3-4 minutes are cost from switchover start to the display of the CLI of the new management board), you cannot perform 802.802.1x authentication within one minute before the hot backup switchover, which ensure non-interrupted data flow of online users. During the switchover, because the 802.1x-dependent modules need to be initialized, other parts of the system, for example, underlying and related channels cannot get ready soon. Therefore, within one minute before the hot backup switchover, the 802.1x authentication cannot be implemented. This issue will be addressed in later solutions.

2) In dual-management board deployment mode, if the active and standby management boards are switched over (3-4 minutes are cost from switchover start to the display of the CLI of the new management board), you cannot connect to the network within two minutes after the hot backup switchover, although the 802.1x authentication is passed. This is because of a restraint of the SS framework. Within a short period after the active/standby switchover, the interaction of the PI and SS on the control plane is shielded (tens of seconds to two minutes, which is subject to the configuration). The newly-authenticated online user cannot access the network within two minutes after the active/standby switchover. However, the services are not affected. This issue will be addressed in later solutions.