Configuring A Restricted Vlan - Cisco 3020 - Catalyst Blade Switch Configuration Manual

Cisco catalyst blade switch 3020 for hp software configuration guide, rel. 12.2(25)sef1
Hide thumbs Also See for 3020 - Cisco Catalyst Blade Switch:
Table of Contents

Advertisement

Chapter 7
Configuring IEEE 802.1x Port-Based Authentication
Command
Step 3
switchport mode access
or
switchport mode private-vlan host
Step 4
dot1x port-control auto
Step 5
dot1x guest-vlan vlan-id
Step 6
end
Step 7
show dot1x interface interface-id
Step 8
copy running-config startup-config
To disable and remove the guest VLAN, use the no dot1x guest-vlan interface configuration command.
The port returns to the unauthorized state.
This example shows how to enable VLAN 2 as an IEEE 802.1x guest VLAN:
Switch(config)# interface gigabitethernet0/2
Switch(config-if)# dot1x guest-vlan 2
This example shows how to set 3 as the quiet time on the switch, to set 15 as the number of seconds that
the switch waits for a response to an EAP-request/identity frame from the client before re-sending the
request, and to enable VLAN 2 as an IEEE 802.1x guest VLAN when an IEEE 802.1x port is connected
to a DHCP client:
Switch(config-if)# dot1x timeout quiet-period 3
Switch(config-if)# dot1x timeout tx-period 15
Switch(config-if)# dot1x guest-vlan 2

Configuring a Restricted VLAN

When you configure a restricted VLAN on a switch, clients that are IEEE 802.1x-compliant are moved
into the restricted VLAN when the authentication server does not receive a valid username and
password. The switch supports restricted VLANs only in single-host mode.
Beginning in privileged EXEC mode, follow these steps to configure a restricted VLAN. This procedure
is optional.
Command
Step 1
configure terminal
Step 2
interface interface-id
Step 3
switchport mode access
or
switchport mode private-vlan host
Step 4
dot1x port-control auto
OL-8915-01
Purpose
Set the port to access mode,
or
Configure the port as a private-VLAN host port.
Enable IEEE 802.1x authentication on the port.
Specify an active VLAN as an IEEE 802.1x guest VLAN. The range is 1
to 4094.
You can configure any active VLAN except an RSPAN VLAN or a voice
VLAN as an IEEE 802.1x guest VLAN.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Purpose
Enter global configuration mode.
Specify the port to be configured, and enter interface configuration mode.
For the supported port types, see the
Configuration Guidelines" section on page
Set the port to access mode,
or
Configure the port as a private-VLAN host port.
Enable IEEE 802.1x authentication on the port.
Cisco Catalyst Blade Switch 3020 for HP Software Configuration Guide
Configuring IEEE 802.1x Authentication
"IEEE 802.1x Authentication
7-20.
7-31

Advertisement

Table of Contents
loading

Table of Contents