Configuring A Guest Vlan - 3Com S7906E Configuration Manual

To do...
Enter Ethernet interface view
Enable periodic
re-authentication
After an 802.1X user passes authentication, if the authentication server assigns a re-authentication
interval for the user through the session-timeout attribute, the assigned re-authentication interval will
take effect instead of that specified on the device. The re-authentication interval assignment varies by
server type. Refer to the specific authentication server implementation for further details.

Configuring a Guest VLAN

The guest VLAN function and the free IP function in EAD fast deployment are mutually exclusive on
a port.
If the traffic from a user-side device carries VLAN tags and the 802.1X authentication and guest
VLAN functions are configured on the access port, you are recommended to configure different
VLAN IDs for the voice VLAN, default VLAN of the port, and 802.1X guest VLAN. This is to ensure
the normal use of the functions.
A super VLAN cannot be set as the guest VLAN. Similarly, a guest VLAN cannot be set as the
super VLAN. For information about super VLAN, refer to VLAN Configuration in the Access
Volume.
Only Hybrid ports support MGV. When you configure a MGV on a Hybrid port, you need configure
the Hybrid port to permit packets of the MGV to pass through untagged.
Configuration prerequisites
Create the VLAN to be specified as the guest VLAN.
To configure a port-based guest VLAN, make sure that the port access control method is
portbased, and the 802.1X multicast trigger function is enabled.
To configure a MAC-based guest VLAN, make sure that the port access control method is
macbased and the MAC VLAN function is enabled on the port. For the MAC VLAN configuration,
refer to VLAN Configuration in the Access Volume.
Configuration procedure
Follow these steps to configure a guest VLAN:
Use the command...
interface interface-type
interface-number
dot1x re-authenticate
1-19
Remarks
—
Required
Disabled by default