H3C S5120-EI Series Operation Manual page 631

1
802.1X Configuration
When configuring 802.1X, go to these sections for information you are interested in:
802.1X Overview
Configuring 802.1X
Configuring a Guest VLAN
Configuring an Auth-Fail VLAN
Configuration prerequisites
Create the VLAN to be specified as the Auth-Fail VLAN.
To configure a port-based Auth-Fail VLAN, make sure that the port access control method is
portbased, and the 802.1X multicast trigger function is enabled.
To configure a MAC-based Auth-Fail VLAN, make sure that the port access control method is
macbased and the MAC VLAN function is enabled on the port. For the MAC VLAN configuration,
refer to VLAN Configuration in the Access Volume.
Configuration procedure
Follow these steps to configure an Auth-Fail VLAN:
To do...
Enter system view
Enter Ethernet interface view
Configure the Auth-Fail VLAN
for the port
Use the command...
system-view
interface interface-type
interface-number
dot1x auth-fail vlan
authfail-vlan-id
1-1
Remarks
—
—
Required
By default, a port is configured
with no Auth-Fail VLAN.