Enable Re-Authentication
Select the box to enable periodic online user re-authentication on the port.
Periodic online user re-authentication tracks the connection status of online users
and updates the authorization attributes assigned by the server, such as the ACL,
and VLAN. The re-authentication interval is specified by the Re-Authentication
Period option in Table 104.
Guest VLAN
Specify an existing VLAN as the guest VLAN. For more information, see
"Configuring an 802.1X guest VLAN."
Auth-Fail VLAN
Specify an existing VLAN as the Auth-Fail VLAN to accommodate users that have
failed 802.1X authentication.
For more information, see "Configuring an Auth-Fail VLAN."
Configuring an 802.1X guest VLAN
Configuration prerequisites
• Create the VLAN to be specified as the 802.1X guest VLAN.
• On the 802.1X-enabled port that performs port-based access control, enable 802.1X multicast
trigger at the CLI. (802.1X multicast trigger is enabled by default.)
Configuration guidelines
When you configure an 802.1X guest VLAN, follow these restrictions and guidelines:
• You can configure only one 802.1X guest VLAN on a port. The 802.1X guest VLANs on different
ports can be different.
• Assign different IDs to the voice VLAN, the PVID, and the 802.1X guest VLAN on a port, so the port
can correctly process incoming VLAN tagged traffic.
• With 802.1X authentication, a hybrid port is always assigned to a VLAN as an untagged member.
After the assignment, do not re-configure the port as a tagged member in the VLAN.
Configuring an Auth-Fail VLAN
Configuration prerequisites
• Create the VLAN to be specified as the 802.1X Auth-Fail VLAN.
• On the 802.1X-enabled port that performs port-based access control, enable 802.1X multicast
trigger. (802.1X multicast trigger is enabled by default.)
Configuration guidelines
Assign different IDs to the voice VLAN, PVID and the 802.1X Auth-Fail VLAN on a port, so the port can
correctly process VLAN tagged incoming traffic.
To Next Page
Loading...
Need help?
General