Guest Vlan And Vlan Assignment Configuration Example - H3C S5120-SI Series Configuration Manual

Guest VLAN and VLAN Assignment Configuration Example

Network requirements
As shown in Figure
A host is connected to port GigabitEthernet 1/0/2 of the device and must pass 802.1X
authentication to access the Internet. GigabitEthernet 1/0/2 is in VLAN 1.
The authentication server runs RADIUS and is in VLAN 2.
The update server, which is in VLAN 10, is for client software download and upgrade.
Port GigabitEthernet 1/0/3 of the device, which is in VLAN 5, is for accessing the Internet.
As shown in Figure
On port GigabitEthernet 1/0/2, enable 802.1X and set VLAN 10 as the guest VLAN of the port. If the
device sends an EAP-Request/Identity packet from the port for the maximum number of times but
still receives no response, the device adds the port to its guest VLAN. In this case, the host and the
update server are both in VLAN 10, so that the host can access the update server and download
the 802.1X client.
As shown in Figure
After the host passes the authentication and logs on, the host is added to VLAN 5. In this case, the
host and GigabitEthernet 1/0/3 are both in VLAN 5, so that the host can access the Internet.
Figure 1-11 Network diagram for guest VLAN configuration
Update server
VLAN 1
GE1/0/2
Supplicant
1-11:
1-12:
1-13:
Authenticator server
VLAN 10 VLAN 2
GE1/0/1 GE1/0/4
VLAN 5
GE1/0/3
Switch
Internet
1-22