Dot1X Critical Recovery-Action - HP HSR6600 Command Reference Manual

Parameters
vlan-id: Specifies a VLAN ID in the range of 1 to 4094. Make sure that the VLAN has been created and
is not a super VLAN. For more information about super VLANs, see Layer 2
Configuration Guide.
Usage guidelines
You can configure only one critical VLAN on a port. The MAC authentication critical VLANs on different
ports can be different.
When you change the access control method from MAC-based to port-based on the port, the mappings
between MAC addresses and the 802.1X critical VLAN are removed. You can use the display mac-vlan
command to display MAC-to-VLAN mappings.
When you change the access control method from port-based to MAC-based on a port that is in a critical
VLAN, the port is removed from the critical VLAN.
To delete a VLAN that has been configured as an 802.1X critical VLAN, you must perform the undo
dot1x critical vlan command first.
Examples
# Specify VLAN 3 as the 802.1X critical VLAN on port GigabitEthernet 3/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/0/1
[Sysname-gigabitethernet3/0/1] dot1x critical vlan 3

dot1x critical recovery-action

Use dot1x critical recovery-action to configure the action that a port takes when an active (reachable)
RADIUS authentication server is detected for users in the 802.1X critical VLAN.
Use undo dot1x critical recovery-action to restore the default.
Syntax
dot1x critical recovery-action reinitialize
undo dot1x critical recovery-action
Default
When a reachable RADIUS server is detected, the system removes the port or 802.1X users from the
critical VLAN without triggering authentication.
Views
Layer 2 Ethernet interface view
Default command level
2: System level
Parameters
reinitialize: Enables the port to trigger 802.1X re-authentication on detection of a reachable RADIUS
authentication server for users in the critical VLAN.
128
LAN Switching
—