Dot1X Guest-Vlan - H3C MSR Series Command Reference Manual

When an unauthenticated user uses a Web browser to access networks other than the free IP, the
device redirects the user to the redirect URL.
The redirect URL must be on the free IP subnet.
If you execute this command multiple times, the most recent configuration takes effect.
Examples
# Configure the redirect URL as http://test.com.
<Sysname> system-view
[Sysname] dot1x ead-assistant url http://test.com
Related commands
display dot1x
dot1x ead-assistant enable
dot1x ead-assistant free-ip

dot1x guest-vlan

Use dot1x guest-vlan to configure an 802.1X guest VLAN on a port.
Use undo dot1x guest-vlan to restore the default.
Syntax
dot1x guest-vlan guest-vlan-id
undo dot1x guest-vlan
Default
No 802.1X guest VLAN exists on a port.
Views
Ethernet interface view
Predefined user roles
network-admin
Parameters
guest-vlan-id: Specifies the ID of the 802.1X guest VLAN. The value range for the VLAN ID is 1 to
4094. Make sure the VLAN has been created and is not a super VLAN. For more information about
super VLANs, see Layer 2—LAN Switching Configuration Guide.
Usage guidelines
An 802.1X guest VLAN accommodates users that have not performed 802.1X authentication. In the
guest VLAN, users can access a limited set of network resources, such as a software server, to
download anti-virus software and system patches.
To delete a VLAN that has been configured as a guest VLAN, you must use the undo dot1x
guest-vlan command first.
Examples
# Specify VLAN 100 as the 802.1X guest VLAN on port GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] dot1x guest-vlan 100
171