To delete a VLAN that has been configured as a guest VLAN, you must remove the guest VLAN
configuration first.
You can configure both an Auth-Fail VLAN and an 802.1X guest VLAN on a port.
Examples
# Specify VLAN 999 as the 802.1X guest VLAN for port GigabitEthernet 3/0/1
<Sysname> system-view
[Sysname] dot1x guest-vlan 999 interface gigabitethernet 3/0/1
# Specify VLAN 10 as the 802.1X guest VLAN for ports GigabitEthernet 3/0/2 to GigabitEthernet
3/0/5.
<Sysname> system-view
[Sysname] dot1x guest-vlan 10 interface gigabitethernet 3/0/2 to gigabitethernet 3/0/5
# Specify VLAN 7 as the 802.1X guest VLAN for all ports.
<Sysname> system-view
[Sysname] dot1x guest-vlan 7
# Specify VLAN 3 as the 802.1X guest VLAN for port GigabitEthernet 3/0/7.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/0/7
[Sysname-GigabitEthernet3/0/7] dot1x guest-vlan 3
Related commands
•
dot1x
dot1x port-method
•
•
dot1x multicast-trigger
mac-vlan enable and display mac-vlan (Layer 2—LAN Switching Command Reference)
•
dot1x handshake
Use dot1x handshake to enable the online user handshake function. The function enables the device to
periodically send handshake messages to the client to check whether a user is online.
Use undo dot1x handshake to disable the function.
Syntax
dot1x handshake
undo dot1x handshake
Default
The function is enabled.
Views
Ethernet Interface view
Default command level
2: System level
Usage guidelines
The 802.1X proxy detection function depends on the online user handshake function. Enable handshake
before enabling proxy detection and disable proxy detection before disabling handshake.
131