Table of Contents
Advertisement
Views
Layer 2 Ethernet interface view
Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
This command enables the device to send 802.1X protocol packets out of an 802.1X-enabled port
without VLAN tags. Use this command to prevent terminal devices connected to the port from failing
802.1X authentication when the following conditions exist:
•
The port is configured as a tagged member of the port VLAN.
•
The terminal devices send 802.1X protocol packets without VLAN tags for authentication and
cannot identify 802.1X protocol packets with VLAN tags.
In other situations, do not use this command.
This command applies only to Ethernet ports of which the link type is hybrid.
Examples
# Enable the device to send 802.1X protocol packets out of Ten-GigabitEthernet 1/0/1 without VLAN
tags.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] dot1x eapol untag
Related commands
display dot1x
dot1x guest-vlan
Use dot1x guest-vlan to configure an 802.1X guest VLAN on a port.
Use undo dot1x guest-vlan to restore the default.
Syntax
dot1x guest-vlan guest-vlan-id
undo dot1x guest-vlan
Default
No 802.1X guest VLAN exists on a port.
Views
Layer 2 Ethernet interface view
Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
guest-vlan-id: Specifies the ID of the 802.1X guest VLAN. The value range for the VLAN ID is 1 to
4094. Make sure the VLAN has been created.
181
Advertisement
Table of Contents
