Dot1X Handshake - HP 3600 v2 Series Command Reference Manual

You must enable 802.1X for an 802.1X guest VLAN to take effect.
To have the 802.1X guest VLAN take effect, complete the following tasks:
Enable 802.1X both globally and on the interface.
•
If the port performs port-based access control, enable the 802.1X multicast trigger function.
•
If the port performs MAC-based access control, configure the MAC-based VLAN function on the
•
port.
When you change the access control method from MAC-based to port-based on a port that carries a
guest VLAN, the mappings between MAC addresses and the 802.1X guest VLAN are removed. You can
use the display mac-vlan command to display MAC-to-VLAN mappings.
When you change the access control method from port-based to MAC-based on a port that is in a guest
VLAN, the port is removed from the guest VLAN.
To delete a VLAN that has been configured as a guest VLAN, you must remove the guest VLAN
configuration first.
Related commands: dot1x, dot1x port-method, and dot1x multicast-trigger; mac-vlan enable and
display mac-vlan (Layer 2
Examples
# Specify VLAN 999 as the 802.1X guest VLAN for port Ethernet 1/0/1
<Sysname> system-view
[Sysname] dot1x guest-vlan 999 interface ethernet 1/0/1
# Specify VLAN 10 as the 802.1X guest VLAN for ports Ethernet 1/0/2 to Ethernet 1/0/5.
<Sysname> system-view
[Sysname] dot1x guest-vlan 10 interface ethernet 1/0/2 to ethernet 1/0/5
# Specify VLAN 7 as the 802.1X guest VLAN for all ports.
<Sysname> system-view
[Sysname] dot1x guest-vlan 7
# Specify VLAN 3 as the 802.1X guest VLAN for port Ethernet 1/0/7.
<Sysname> system-view
[Sysname] interface ethernet 1/0/7
[Sysname-Ethernet1/0/7] dot1x guest-vlan 3

dot1x handshake

Syntax
dot1x handshake
undo dot1x handshake
View
Ethernet Interface view
Default level
2: System level
Parameters
None
LAN Switching Command Reference).
—
109