Dot1X Guest-Vlan - HP 3600 v2 Series Command Reference Manual

By default, the access device supports only the at sign (@) delimiter for 802.1X users.
The delimiter set you configured overrides the default setting. If @ is not included in the delimiter set, the
access device will not support the 802.1X users that use @ as the domain name delimiter.
If a username string contains multiple configured delimiters, the leftmost delimiter is the domain name
delimiter. For example, if you configure @, /, and \ as delimiters, the domain name delimiter for the
username string 123/22\@abc is the forward slash (/).
The cut connection user-name user-name and display connection user-name user-name commands are
not available for 802.1X users that use / or \ as the domain name delimiter. For more information about
the two commands, see the chapter "AAA configuration commands."
Examples
# Specify the characters @, /, and \ as domain name delimiters.
<Sysname> system-view
[Sysname] dot1x domain-delimiter @\/

dot1x guest-vlan

Syntax
In system view:
dot1x guest-vlan guest-vlan-id [ interface interface-list ]
undo dot1x guest-vlan [ interface interface-list ]
In Ethernet interface view:
dot1x guest-vlan guest-vlan-id
undo dot1x guest-vlan
View
System view, Ethernet interface view
Default level
2: System level
Parameters
guest-vlan-id: Specifies the ID of the VLAN to be specified as the 802.1X guest VLAN, in the range of 1
to 4094. It must already exist. Make sure that the VLAN has been created and is not a super VLAN. For
more information about super VLANs, see Layer 2
interface interface-list: Specifies a port list. The interface-list argument is in the format of interface-list =
{ interface-type interface-number [ to interface-type interface-number ] } & <1- 1 0>, where interface-type
represents the port type, interface-number represents the port number, and & <1- 1 0> means that you can
provide up to 10 ports or port ranges. The start port number must be smaller than the end number and
the two ports must be of the same type. If no interface is specified, you configure an 802.1X guest VLAN
for all Layer 2 Ethernet ports.
Description
Use the dot1x guest-vlan command to configure an 802.1X guest VLAN for the specified or all ports.
Use the undo dot1x guest-vlan command to remove the 802.1X guest VLAN on the specified or all ports.
By default, no 802.1X guest VLAN is configured on a port.
LAN Switching Configuration Guide.
—
108