Mac-Authentication Guest-Vlan - H3C S3100 Series Command Manual

View
Ethernet interface view
Parameters
authfail-vlan-id: ID of the Auth-Fail VLAN for the port, in the range of 1 to 4094. The VLAN must already
exist.
Description
Use the mac-authentication auth-fail vlan command to specify an Auth-Fail VLAN for MAC
authentication. After the configured Auth-Fail VLAN takes effect, all users failing the authentication on
the port will be added to the Auth-Fail VLAN.
Use the undo mac-authentication auth-fail vlan command to remove the Auth-Fail VLAN
configuration.
By default, no Auth-Fail VLAN is configured on a port.
Note that:
Currently, only the S3100-EI series support this two commands.
Failing authentication means being denied by the authentication server due to reasons such as
wrong password. Authentication failures caused by authentication timeout or network connection
problems do not fall into this category.
You must enable MAC VLAN for an MAFV to take effect.
It is not allowed to delete a VLAN that is configured as an Auth-Fail VLAN directly. To delete such a
VLAN, you need to remove the Auth-Fail VLAN configuration first by using the undo
mac-authentication auth-fail vlan command.
Examples
# Configure VLAN 5 as the Auth-Fail VLAN for MAC authentication on Ethernet 1/0/1.
<Sysname> system-view
[Sysname] interface ethernet 1/0/1
[Sysname-Ethernet1/0/1] mac-authentication auth-fail 5

mac-authentication guest-vlan

Syntax
mac-authentication guest-vlan vlan-id
undo mac-authentication guest-vlan
View
Ethernet port view
Parameters
vlan-id: ID of the guest VLAN configured for the current port. This argument is in the range of 1 to 4,094.
The VLAN must already exist.
1-11