Configuring A Guest Vlan - Cisco Catalyst 2960-X Security Configuration Manual

Configuring IEEE 802.1x Port-Based Authentication
Command or Action
Step 6
show running-config
Example:
Switch# show running-config
Step 7 copy running-config startup-config
Example:
Switch# copy running-config startup-config

Configuring a Guest VLAN

When you configure a guest VLAN, clients that are not 802.1x-capable are put into the guest VLAN when
the server does not receive a response to its EAP request/identity frame. Clients that are 802.1x-capable but
that fail authentication are not granted network access. The switch supports guest VLANs in single-host or
multiple-hosts mode.
Beginning in privileged EXEC mode, follow these steps to configure a guest VLAN. This procedure is optional.
SUMMARY STEPS
1. configure terminal
2. interface interface-id
3. Use one of the following:
4. authentication event no-response action authorize vlan vlan-id
5. end
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
Switch# configure terminal
OL-29048-01
• switchport mode access
• switchport mode private-vlan host
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
Purpose
Verifies your entries.
(Optional) Saves your entries in the configuration file.
Purpose
Enters the global configuration mode.
Configuring a Guest VLAN
323