Configuring A Guest Vlan - Cisco Catalyst 2960 series Configuration Manual

How to Configure 802.1x Port-Based Authentication
Command or Action
Step 2
interface interface-id
Example:
Switch(config)# interface gigabitethernet1/0/3
Step 3 aaa accounting dot1x default start-stop group radius
Example:
Switch(config-if)# aaa accounting dot1x default
start-stop group radius
Step 4 aaa accounting system default start-stop group radius
Example:
Switch(config-if)# aaa accounting system default
start-stop group radius
Step 5 end
Example:
Switch(config-if)# end
Step 6
show running-config
Example:
Switch# show running-config
Step 7
copy running-config startup-config
Example:
Switch# copy running-config startup-config

Configuring a Guest VLAN

When you configure a guest VLAN, clients that are not 802.1x-capable are put into the guest VLAN when
the server does not receive a response to its EAP request/identity frame. Clients that are 802.1x-capable but
that fail authentication are not granted network access. The switch supports guest VLANs in single-host or
multiple-hosts mode.
Beginning in privileged EXEC mode, follow these steps to configure a guest VLAN. This procedure is optional.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1378
Purpose
Specifies the port to be configured, and enter interface
configuration mode.
Enables 802.1x accounting using the list of all
RADIUS servers.
(Optional) Enables system accounting (using the list
of all RADIUS servers) and generates system
accounting reload event messages when the switch
reloads.
Returns to privileged EXEc mode.
Verifies your entries.
(Optional) Saves your entries in the configuration file.