What Do I Do When the Prompt "smp_access_ip_used_by_online_user is used by the user" Is Displayed?

What Do I Do When the Prompt "smp_access_ip_used_by_online_user is used by the user" Is Displayed?

Fault symptom: The prompt "smp_access_ip_used_by_online_user is used by the user" is displayed in the authentication failure log on the Web page of the SMP. The address that reports the error is checked and it is found that the address is occupied by an online user (the online duration is long).

Troubleshooting:

1. Check whether multiple DHCP servers assign the same IP address. (Ensure that the communication is normal, ping the online user to check whether the user is actually online.)

2. After checking that the user is actually online, check the configuration on the Network Access Switch (NAS) and SMP.

NAS configuration: Check the update period on the AC:

WS6008(config)#offline-detect interval 15 threshold 0       This command indicates that a user is forced to go offline when there is no traffic of the user within 15 minutes (8 hours by default).

WS6008(config)#aaa accounting  update periodic 5  This command indicates that the accounting update period is 5 minutes by default.

Configuration on the Web page of the SMP: Check the user heartbeat detection interval.

1.      If a non-SA client is used for authentication, the accounting update mechanism is adopted to keep online users alive. Enable the accounting update function on the device of the non-Ruijie security agent client and set the accounting update period to be consistent with the online heartbeat interval of the user.

2.       If an SA client is used for 802.1x authentication, the heartbeat mechanism is adopted to keep online users alive. If the system fails to receive a heartbeat notification from an online user within three consecutive online heartbeat periods, the system considers that the user is offline and clears the user information.

The preceding figure shows an example of incorrect configuration. User Online Heartbeat Period is set to 1200 minutes, indicating that a user is forced to go offline after the system fails to receive a heartbeat notification from the user within three such periods (that is, 60 hours).