Dot1X Auth-Fail-Vlan - Dell Z9500 Command Reference Manual

dot1x auth-fail-vlan

Configure an authentication failure VLAN for users and devices that fail 802.1X authentication.
Z9500
Syntax
dot1x auth-fail-vlan vlan-id [max-attempts number]
To delete the authentication failure VLAN, use the no dot1x auth-fail-vlan
vlan-id [max-attempts number] command.
Parameters
vlan-id
max-attempts
number
Defaults 3 attempts
Command CONFIGURATION (conf-if-interface-slot/port)
Modes
Command
This guide is platform-specific. For command information about other platforms,
History
refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version
9.2(1.0)
8.3.19.0
8.3.7.0
7.6.1.0
Usage
If the host responds to 802.1X with an incorrect login/password, the login fails. The
Information
switch attempts to authenticate again until the maximum attempts configured is
reached. If the authentication fails after all allowed attempts, the interface is moved
to the authentication failed VLAN.
After the authentication VLAN is assigned, the port-state must be toggled to restart
authentication. Authentication occurs at the next re-authentication interval (dot1x
reauthentication).
Related
dot1x port-control
Commands
dot1x guest-vlan
1642
Enter the VLAN Identifier. The range is from 1 to 4094.
(OPTIONAL) Enter the keywords max-attempts then
number of attempts desired before authentication fails. The
range is from 1 to 5. The default is 3.
Description
Introduced on the Z9500.
Introduced on the S4820T.
Introduced on the S4810.
Introduced on the C-Series, S-Series, and E-Series.
— enables port-control on an interface.
— configures a guest VLAN for non-dot1x devices.
Security