Dot1X Critical Vlan; Dot1X Domain-Delimiter - HP MSR Series Command Reference Manual

[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] dot1x auth-fail vlan 100
Related commands
display dot1x

dot1x critical vlan

Use dot1x critical vlan to configure an 802.1X critical VLAN on a port.
Use undo dot1x critical vlan to restore the default.
Syntax
dot1x critical vlan vlan-id
undo dot1x critical vlan
Default
No 802.1X critical VLAN is configured on any port.
Views
Ethernet interface view
Predefined user roles
network-admin
Parameters
vlan-id: Specifies the ID of the 802.1X critical VLAN on the port. The value range for the VLAN ID is 1 to
4094. Make sure the VLAN has been created.
Usage guidelines
An 802.1X critical VLAN accommodates users who fail 802.1X authentication because all the RADIUS
servers in their ISP domains are unreachable.
To delete a VLAN that has been configured as an 802.1X critical VLAN, you must first use the undo dot1x
critical vlan command.
For more information about the 802.1X critical VLAN, see Security Configuration Guide.
Examples
# Specify VLAN 100 as the 802.1X critical VLAN on port GigabitEthernet 2/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] dot1x critical vlan 100
Related commands
display dot1x

dot1x domain-delimiter

Use dot1x domain-delimiter to specify a set of domain name delimiters supported by the device.
Use undo dot1x domain-delimiter to restore the default.
119