121
Predefined user roles
network-admin
Parameters
guest-vlan-id: Specifies the ID of the 802.1X guest VLAN. The value range for the VLAN ID is 1 to 4094.
Make sure the VLAN has been created.
Usage guidelines
An 802.1X guest VLAN accommodates users who have not performed 802.1X authentication. In the
guest VLAN, users can access a limited set of network resources, such as a software server, to download
anti-virus software and system patches.
To delete a VLAN that has been configured as a guest VLAN, you must use the undo dot1x guest-vlan
command first.
For more information about the 802.1X guest VLAN, see Security Configuration Guide.
Examples
# Specify VLAN 100 as the 802.1X guest VLAN on port GigabitEthernet 2/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] dot1x guest-vlan 100
Related commands
display dot1x
dot1x handshake
Use dot1x handshake to enable the online user handshake function.
Use undo dot1x handshake to disable the function.
Syntax
dot1x handshake
undo dot1x handshake
Default
The online user handshake function is enabled.
Views
Ethernet Interface view
Predefined user roles
network-admin
Usage guidelines
The online user handshake function enables the device to periodically (set with the dot1x timer
handshake-period command) send handshake messages to the client to verify the connectivity status of
online 802.1X users. If no response is received from an online user after the maximum number of
handshake attempts (set by the dot1x retry command) has been made, the network access device sets
the user in the offline state.
To Next Page
Loading...
Need help?
General
