Command Usage
Use the dot1x guest-vlan enable Interface Configuration mode command to
enable unauthorized users on an interface to access the guest VLAN.
If the guest VLAN is defined and enabled, the port automatically joins the
guest VLAN when the port is unauthorized and leaves it when the port
becomes authorized. To be able to join or leave the guest VLAN, the port
should not be a static member of the guest VLAN.
Example
The following example defines VLAN 2 as a guest VLAN.
Console#
Console# configure
Console(config)# vlan database
Console(config-vlan)# vlan 2
Console(config-vlan)# exit
Console(config)# interface vlan 2
Console(config-if)# dot1x guest-vlan
Related Commands
dot1x guest-vlan enable
show dot1x advanced
dot1x guest-vlan enable
The dot1x guest-vlan enable Interface Configuration mode command enables
unauthorized users on the interface access to the Guest VLAN. To disable access,
use the no form of this command
Syntax
dot1x guest-vlan enable
no dot1x guest-vlan enable
Default Setting
Disabled.
Command Mode
Interface Configuration (Ethernet) mode
Command Usage
A device can have only one global guest VLAN. The guest VLAN is defined
using the dot1x guest-vlan Interface Configuration mode command.
Example
The following example enables unauthorized users on Ethernet port 1/e1 to access the
guest VLAN.
Console# configure
Console(config)# interface ethernet 1/e1
Console(config-if)# dot1x guest-vlan enable
802.1x Commands
289
4