3Com S7906E Command Reference Manual page 1823

Parameters
guest-vlan-id: ID of the VLAN to be specified as the guest VLAN, in the range 1 to 4094. It must already
exist.
interface interface-list: Specifies a port list. The interface-list argument is in the format of interface-list =
{ interface-type interface-number [ to interface-type interface-number ] } & <1-10>, where interface-type
represents the port type, interface-number represents the port number, and & <1-10> means that you
can provide up to 10 port indexes/port index lists for this argument. The start port number must be
smaller than the end number and the two ports must be of the same type.
Description
Use the dot1x guest-vlan command to configure the guest VLAN for specified or all ports.
Use the undo dot1x guest-vlan command to remove the guest VLAN(s) configured for specified or all
ports.
By default, a port is configured with no guest VLAN.
Note that:
In system view, this command configures a guest VLAN for all Layer 2 Ethernet ports if you do not
specify the interface-list argument, and configures a guest VLAN for specified ports if you specify
the interface-list argument.
In interface view, you cannot specify the interface-list argument and can only configure guest VLAN
for the current port.
You must enable 802.1X for a guest VLAN to take effect.
You must enable the 802.1X multicast trigger function for a guest VLAN to take effect.
When the port access control method is set to portbased, you can specify a tagged VLAN as the
guest VLAN of a Hybrid port, but the guest VLAN does not take effect. If the guest VLAN of a Hybrid
port is in operation, you cannot configure the guest VLAN to carry VLAN tag.
A super VLAN cannot be set as the guest VLAN. Similarly, a guest VLAN cannot be set as the
super VLAN. For information about super VLAN, refer to VLAN Configuration in the Access
Volume.
You are not allowed to delete a VLAN that is configured as a guest VLAN. To delete such a VLAN,
you need to remove the guest VLAN configuration first.
You cannot configure both the guest VLAN function and the free IP function on a port.
Related commands: dot1x; dot1x port-method; dot1x multicast-trigger; mac-vlan enable, and
display mac-vlan in VLAN Commands in the Access Volume.
Examples
# Specify port GigabitEthernet 2/0/1 to use VLAN 999 as its guest VLAN.
<Sysname> system-view
[Sysname] dot1x guest-vlan 999 interface GigabitEthernet 2/0/1
# Specify ports GigabitEthernet 2/0/2 to GigabitEthernet 2/0/5 to use VLAN 10 as its guest VLAN.
<Sysname> system-view
[Sysname] dot1x guest-vlan 10 interface GigabitEthernet 2/0/2 to GigabitEthernet 2/0/5
# Specify all ports to use VLAN 7 as their guest VLAN.
<Sysname> system-view
[Sysname] dot1x guest-vlan 7
1-7