Today you learned in the process of debugging help others change the network card MAC address and then to get to the Internet,,
Probably process is: individual cannot access the web page, after tests found that the access address is normal, normal card function (Intranet web page to open), to the outside network tracert to firewall to intercept,
Then think of should the user on the page or application of a firewall default ban triggered the firewall bans
(but a bit strange, firewall is the default configuration, basic didn't do any strategy to ban, but has a plugin manager's bypass mode of AC behavior illegal web and application strategies of banned)
General topology is the core export, firewall, switches (bypass plugin for a Ac do audit)
And colleagues in the old driver is called to change the network card MAC address of the terminal, manually assign an address can smooth the Internet (the original is DHCP)
Words I made network related for several years,,,, also I don't know what I can change through the network card MAC address to through the AC/AF review,,,, so they will change the network card address that is not can unlimited time to test AC/AF censorship,,, this is a bug, and I found the address change can we changed the address of a 001122334455, for example, as long as the manual allocation can normal Internet access, the same network segment address, the sweat ~ ~
Only know some banned is directly before sealing the MAC address of the terminal hardware, such as steam is ban ban your computer directly to the motherboard above the MAC address, although the mainboard MAC address but can be by some technical ways to write, but seems to be very troublesome,,,
Welcome to discuss, the great god, and AC/AF is deeply convinced that is not too old, are all products over the years
CodePudding user response:
This is normal, a lot of equipment is by limiting the MAC to restrict traffic, change MAC can realize to bypass the restrictions, the cisco had command can learn multiple MAC ban on a port