Dot1X Critical Recovery-Action - HP 5120 SI series Command Reference Manual

Default level
2: System level
Parameters
vlan-id: Specifies a VLAN ID, in the range of 1 to 4094. Make sure the VLAN has been created.
Description
Use the dot1x critical vlan command to configure an 802.1X critical VLAN on a port for users that fail
802.1X authentication because all the RADIUS servers in their ISP domains have been unreachable.
By default, no critical VLAN is configured on any port.
You can configure only one critical VLAN on a port. The 802.1X critical VLANs on different ports can be
different.
When you change the access control method from MAC-based to port-based on the port, the mappings
between MAC addresses and the 802.1X critical VLAN are removed. You can use the display mac-vlan
command to display MAC-to-VLAN mappings.
When you change the access control method from port-based to MAC-based on a port that is in a critical
VLAN, the port is removed from the critical VLAN.
To delete a VLAN that has been configured as an 802.1X critical VLAN, you must perform the undo
dot1x critical vlan command first.
Related commands: dot1x, dot1x port-method, and dot1x critical recovery-action.
Examples
# Specify VLAN 3 as the 802.1X critical VLAN on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] dot1x critical vlan 3

dot1x critical recovery-action

Syntax
dot1x critical recovery-action reinitialize
undo dot1x critical recovery-action
Views
Layer 2 Ethernet interface view
Default level
2: System level
Parameters
reinitialize: Enables the port to trigger 802.1X re-authentication on detection of a reachable RADIUS
authentication server for users in the critical VLAN.
Description
Use dot1x critical recovery-action to configure the action that a port takes when an active (reachable)
RADIUS authentication server is detected for users in the 802.1X critical VLAN.
Use undo dot1x critical recovery-action to restore the default.
98