In the scenario where SACG is linked in bypass mode, only the traffic initiated by the end user passes through the firewall. The traffic returned from the server to the end user does not need to pass through the firewall. For the firewall, it belongs to the inconsistent path of the traffic back and forth. In this case, you need to disable the session state detection function.

The terminal host access control function does not take effect, the following is SACG View information on:
<FW> display right- manager role-id rule
Advanced ACL 3099 ,25 rules,not bingding with vpn-instance Ad's step is 1 rule 1000 permit ip (1280 times matched) rule 1001 permit ip destination 172.18.11.2210 (581 times matched) rule 1002 permit ip destination 172:18.11.2230 (77 times matched) rule 1003 permit ip destination 172.19.0.0 0.0 255.255 (355 Book times matched) rule 1004 deny ip (507759 times matched) Which of the following statements is correct?

A Layer 3 forwarding device exists between the authentication client and the admission control device. In this case, if the Layer 3 authentication mode of Portal authentication is adopted, the device can also obtain the MAC address of the authentication client. Therefore, the IP address and MAC address can be used as the same to identify the user's information.

Which of the following is correct of the accompanying logical architecture of the business?

Which of the following options are right 802. 1X The description of the access process is correct? (Multiple choice).