Dot1X Guest-Vlan - HP HSR6600 Command Reference Manual

Examples
# Specify the characters @, /, and \ as domain name delimiters.
<Sysname> system-view
[Sysname] dot1x domain-delimiter @\/

dot1x guest-vlan

Use dot1x guest-vlan to configure an 802.1X guest VLAN for the specified or all ports. A guest VLAN on
a port accommodates users that have not performed 802.1X authentication. In the guest VLAN, users can
access a limited set of network resources, such as a software server, to download anti-virus software and
system patches.
Use undo dot1x guest-vlan to remove the 802.1X guest VLAN on the specified or all ports.
Syntax
In system view:
dot1x guest-vlan guest-vlan-id [ interface interface-list ]
undo dot1x guest-vlan [ interface interface-list ]
In interface view:
dot1x guest-vlan guest-vlan-id
undo dot1x guest-vlan
Default
No 802.1X guest VLAN is configured on a port.
Views
System view, Ethernet interface view
Default command level
2: System level
Parameters
guest-vlan-id: Specifies the ID of the VLAN to be specified as the 802.1X guest VLAN. The value range
is 1 to 4094. Make sure that the VLAN has been created and is not a super VLAN. For more information
about super VLANs, see Layer 2—LAN Switching Configuration Guide.
interface interface-list: Specifies a port list. The interface-list argument is in the format of interface-list =
{ interface-type interface-number [ to interface-type interface-number ] } & <1- 1 0>, where interface-type
represents the port type, interface-number represents the port number, and & <1- 1 0> means that you can
provide up to 10 ports or port ranges. The start port number must be smaller than the end number and
the two ports must be of the same type. If no interface is specified, you configure an 802.1X guest VLAN
for all Layer 2 Ethernet ports.
Usage guidelines
You must enable 802.1X for an 802.1X guest VLAN to take effect.
Guest VLAN is supported on ports that perform port-based access control.
To have the 802.1X guest VLAN take effect, complete the following tasks:
Enable 802.1X both globally and on the interface.
•
Enable the 802.1X multicast trigger function.
•
130