Dot1X Guest-Vlan Supplicant - Cisco Catalyst 4500 Series Command Reference Manual

dot1x guest-vlan supplicant

dot1x guest-vlan supplicant
To place an 802.1X-capable supplicant (host) into a guest VLAN, use the dot1x guest-vlan supplicant
global configuration command. To return to the default setting, use the no form of this command.
Syntax Description
This command has no arguments or keywords.
Defaults 802.1X-capable hosts are not put into a guest VLAN.
Command Modes Global configuration mode
Command History Release
12.2(25)EWA
Usage Guidelines With Cisco Release 12.2(25) EWA, you can use the dot1x guest-vlan supplicant command to place an
802.1X-capable host into a guest VLAN. Prior to Cisco Release 12.2(25)EWA, you could only place
non-802.1X capable hosts into a guest VLAN.
When guest VLAN supplicant behavior is enabled, the Catalyst 4500 series switch does not maintain
EAPOL packet history. The switch allows clients that fail 802.1X authentication to access a guest
VLAN, whether or not EAPOL packets have been detected on the interface.
Examples
This example shows how to place an 802.1X-capable supplicant (host) into a guest VLAN:
Switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)# dot1x guest-vlan supplicant
Switch(config)# end
Switch#
Related Commands Command
dot1x system-auth-control
show dot1x
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release IOS XE 3.3.0SG and IOS 15.1(1)SG)
2-206
dot1x quest-vlan supplicant
no dot1x quest-vlan supplicant
Modification
Support for this command was introduced on the Catalyst 4500 series switch.
Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
Description
Enables 802.1X authentication on the switch.
Displays dot1x information.
OL-25342 -01