????近期對華為S5300交換機啟用802.1x認證之后，由于接入端口的接入終端固定，所以想同時做一個靜態(tài)mac地址綁定，但發(fā)現(xiàn)配置失敗。
情況一
????如果接入端口下，接入終端已經通過802.1x認證，則配置靜態(tài)mac地址綁定時，會報錯，配置不上去；因為此時接入端口已經可以學習到mac地址，而且mac地址類型是authen，執(zhí)行靜態(tài)mac地址綁定時，則提示“Error: The MAC address entry of another type already exists.”，另一種類型的mac地址條目存在。
[S5352]disp dot1x interface GigabitEthernet 0/0/39
GigabitEthernet0/0/39 status: UP 802.1x protocol is Enabled
Port control type is Auto
Authentication method is MAC-based
Reauthentication is disabled
Maximum users: 256
Current users: 1
Guest VLAN is disabled
Critical VLAN is disabled
Restrict VLAN is disabled
Authentication Success: 1 Failure: 0
EAPOL Packets: TX : 9 RX : 9
Sent EAPOL Request/Identity Packets : 1
EAPOL Request/Challenge Packets : 7
Multicast Trigger Packets : 0
EAPOL Success Packets : 1
EAPOL Failure Packets : 0
Received EAPOL Start Packets : 1
EAPOL Logoff Packets : 0
EAPOL Response/Identity Packets : 1
EAPOL Response/Challenge Packets: 7
Online user(s) info:
UserId MAC/VLAN AccessTime UserName
------------------------------------------------------------------------------
988 000f-4103-211f/500 2018/04/23 15:33:46 Alice
------------------------------------------------------------------------------
Total 1,1 printed
[S5352]
[S5352]mac-address static 000f-4103-211f GigabitEthernet 0/0/39 vlan 500
Error: The MAC address entry of another type already exists.
[S5352]
[S5352]
[S5352]disp mac-address GigabitEthernet 0/0/39
-------------------------------------------------------------------------------
MAC Address VLAN/VSI Learned-From Type
-------------------------------------------------------------------------------
000f-4103-211f 500/- GE0/0/39 authen
-------------------------------------------------------------------------------
Total items displayed = 1
[S5352]
情況二
????如果接入端口下，還沒有接入終端通過802.1x認證，則靜態(tài)mac地址綁定命令可以成功執(zhí)行，但是，802.1x認證管控已經失效，接入端口下帶終端不需要認證，都可以直接接入網(wǎng)絡。
華為研發(fā)確認
????咨詢了華為400，研發(fā)確認我所使用的華為S5300交換機（軟件版本：Version 5.110 (S5300 V200R001C00SPC300)），確認存在802.1x和靜態(tài)mac綁定功能沖突，兩個功能只能取其一。
