Example
The following command enables sending traps when a MAC address was failed in authentication of the
802.1X MAC authentication access control.
console config-if(Config)# dot1x traps mac-authentication failure
dot1x radius-attributes vlan
The dot1x radius-attributes vlan Interface Configuration mode command enables user-based VLAN
assignment. Use the no form of this command to disable user-based VLAN assignment.
Syntax
•
dot1x radius-attributes vlan
•
no dot1x radius-attributes vlan
Default Configuration
Disabled.
Command Mode
Interface configuration (Ethernet) mode
User Guidelines
•
The dot1x radius-attributes vlan command configuration is allowed only when the port is Forced
Authorized.
•
RADIUS attributes are supported only in the multiple sessions mode (multiple hosts with
authentication).
•
When RADIUS attributes are enabled and the RADIUS Accept message does not contain as an
attribute the supplicant's VLAN, then the supplicant is rejected.
•
Packets to the supplicant are sent untagged.
•
After successful authentication the port remains member in the unauthenticated VLANs and in the
Guest VLAN. Other static VLAN configuration is not applied on the port.
•
If the supplicant VLAN does not exist on the switch, the supplicant is rejected.
Examples
The following command enables user-based VLAN assignment.
console config-if(Config)# dot1x radius-attributes vlan
536
802.1x Commands