Dot1X Guest-Vlan - Cisco Catalyst 3750 Metro Command Reference Manual

Hide thumbs Also See for Catalyst 3750 Metro:

Table of Contents

Catalyst 3750 Metro Switch Cisco IOS Commands

dot1x guest-vlan

Use the dot1x guest-vlan interface configuration command to specify an active VLAN as an 802.1x

guest VLAN. Use the no form of this command to return to the default setting.

Syntax Description

No guest VLAN is configured.

Command Modes

Interface configuration

Command History

Usage Guidelines

When you configure a guest VLAN, clients that are not 802.1x-capable are put into the guest VLAN

when the server does not receive a response to its Extensible Authentication Protocol over LAN

(EAPOL) request/identity frame. Clients that are 802.1x-capable but fail authentication are not granted

access to the network.

Guest VLANs are supported on 802.1x ports in single-host mode and multiple-hosts mode.

The switch maintains the EAPOL packet history. If another EAPOL packet is detected on the interface

during the lifetime of the link, the guest VLAN feature is disabled. If the port is already in the guest

VLAN state, the port is returned to the unauthorized state, and authentication is restarted. The EAPOL

history is reset upon loss of link.

Entering the dot1x guest-vlan supplicant global configuration command disables this behavior.

Any number of non-IEEE 802.1x-capable clients are allowed access when the switch port is moved to

the guest VLAN. If an IEEE 802.1x-capable client joins the same port on which the guest VLAN is

configured, the port is put into the unauthorized state in the user-configured access VLAN, and

authentication is restarted.

Guest VLANs are supported on IEEE 802.1x ports in single-host or multiple-hosts mode.

You can configure any active VLAN except an RSPAN VLAN or a voice VLAN as an 802.1x guest

VLAN. The guest VLAN feature is not supported on internal VLANs (routed ports) or trunk ports; it is

supported only on access ports.

This example shows how to specify VLAN 5 as an 802.1x guest VLAN:

Switch(config-if)# dot1x guest-vlan 5

dot1x guest-vlan vlan-id

no dot1x guest-vlan

Specify an active VLAN as an 802.1x guest VLAN. The range is 1 to 4094.

Modification

This command was introduced.

Catalyst 3750 Metro Switch Command Reference

dot1x guest-vlan