Mac-Authentication Critical Vsi - HP FlexNetwork 7500 Series Command Reference Manual

Default
No MAC authentication critical VLAN exists on a port.
Views
Layer 2 Ethernet interface view
Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
critical-vlan-id: Specifies a VLAN as the MAC authentication critical VLAN. The value range for the
VLAN ID is 1 to 4094. Make sure the VLAN has been created.
Usage guidelines
The MAC authentication critical VLAN accommodates users that have failed MAC authentication
because all the servers in their ISP domains are unreachable. Users in the critical VLAN can access
network resources in the critical VLAN.
You cannot specify a VLAN as both a super VLAN and a MAC authentication critical VLAN on a port.
For more information about super VLANs, see Layer 2—LAN Switching Configuration Guide.
On a port, the MAC authentication critical VLAN configuration is mutually exclusive with the MAC
authentication guest VSI and MAC authentication critical VSI settings.
The critical VLAN feature takes effect when MAC authentication is performed only through RADIUS
servers. If a MAC authentication user fails local authentication after RADIUS authentication, the user
is not assigned to the critical VLAN.
Before you delete a VLAN that has been set as a MAC authentication critical VLAN, use the undo
mac-authentication critical vlan command to remove the critical VLAN configuration.
Examples
# Configure VLAN 100 as the MAC authentication critical VLAN on Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] mac-authentication critical vlan 100
Related commands
display mac-authentication
reset mac-authentication critical vlan

mac-authentication critical vsi

Use mac-authentication critical vsi to configure a MAC authentication critical VSI on a port.
Use undo mac-authentication critical vsi to restore the default.
Syntax
mac-authentication critical vsi critical-vsi-name
undo mac-authentication critical vsi
Default
No MAC authentication critical VSI exists on a port.
213