H3C MSR 20-20 Command Reference Manual page 1902

1902 C 126: 802.1
HAPTER
View
Parameter
Description
C C
X ONFIGURATION OMMANDS
dot1x guest-vlan vlan-id
undo dot1x guest-vlan
System view/interface view
vlan-id: ID of the VLAN to be specified as the guest VLAN, in the range 1 to 4094.
interface interface-list: Specifies an Ethernet port list, which can contain multiple
Ethernet ports. The interface-list argument is in the format of interface-list =
{ interface-type interface-number [ to interface-type interface-number ] } &
<1-10>, where interface-type represents the port type, interface-number
represents the port number, and & <1-10> means that you can provide up to 10
port indexes/port index lists for this argument. The start port number must be
smaller than the end number and the two ports must of the same type.
Use the
dot1x guest-vlan
or all ports.
Use the
undo dot1x guest-vlan
configured for specified or all ports.
By default, a port is configured with no guest VLAN.
In system view, this command configures guest VLAN for all ports with
interface-list not provided, and configures guest VLAN for specified with
interface-list provided.
In interface view, you cannot specify the interface-list argument and can only
configure guest VLAN for the current port.
For the guest VLAN feature to take effect on a port, make sure that:
802.1x is enabled.
■
The port access control method is set to portbased.
■
The port access control mode is set to auto.
■
The link type of the port is set to access.
■
Note that:
You cannot delete a VLAN that has been configured as a guest VLAN.
■
If the port access control method is set to macbased, the guest VLAN can be
■
configured successfully, but the configuration does not take effect.
You can specify a tagged VLAN as the guest VLAN for a Hybrid port, but the
■
guest VLAN does not take effect. Similarly, if a guest VLAN for a Hybrid port is
in operation, you cannot configure the guest VLAN to carry tags.
A super VLAN cannot be set as the guest VLAN. Similarly, a guest VLAN cannot
■
be set as the super VLAN. For information about super VLAN, refer to "VLAN
Configuration Commands" on page 631.
The guest VLAN function does not apply to non-access interfaces.
■
command to configure the guest VLAN for specified
command to remove the guest VLAN(s)