As for the dot1x version-user command, if you execute it in system view without specifying the
interface-list argument, the command applies to all ports. You can also execute this command in port
view. In this case, this command applies to the current port only and the interface-list argument is not
needed.
Enabling DHCP-triggered Authentication
After performing the following configuration, 802.1x allows running DHCP on access users, and users
are authenticated when they apply for dynamic IP addresses through DHCP.
Follow these steps to enable DHCP-triggered authentication:
To do...
Enter system view
Enable DHCP-triggered
authentication
Configuring Guest VLAN
Follow these steps to configure guest VLAN:
To do...
Enter system view
Configure the access control
method of ports
Enable the
guest VLAN
function
Use the command...
system-view
dot1x dhcp-launch
Use the command...
system-view
dot1x port-method portbased
In system
dot1x guest-vlan vlan-id
view
[ interface interface-list ]
interface interface-type
interface-number
In port view
dot1x guest-vlan vlan-id
quit
1-18
Remarks
—
Required
By default, DHCP-triggered
authentication is disabled.
Remarks
—
Required
The default access control
method on a port is
MAC-based. That is, the
macbased keyword is used by
default.
Required
By default, the guest VLAN
function is disabled.