Configuring Guest Vlan - H3C S5100-SI Series Operation Manual

Operation Manual – 802.1x and System Guard
H3C S5100-SI/EI Series Ethernet Switches
Follow these steps to enable DHCP-triggered authentication:
Enter system view
Enable DHCP-triggered
authentication

1.4.4 Configuring Guest VLAN

Follow these steps to configure guest VLAN:
Enter system view
Configure port access
method
Enable the
guest
VLAN
function
Caution:
The guest VLAN function is available only when the switch operates in the
port-based authentication mode.
Only one guest VLAN can be configured for each switch.
The guest VLAN function cannot be implemented if you configure the dot1x
dhcp-launch command on the switch to enable DHCP-triggered authentication.
This is because the switch does not send authentication packets in that case.
To do...
system-view
dot1x dhcp-launch
To do...
system-view
dot1x port-method
portbased
In system dot1x guest-vlan vlan-id
view [ interface interface-list ]
interface interface-type
interface-number
In port view
dot1x guest-vlan vlan-id
quit
Use the command...
Use the command...
1-22
Chapter 1 802.1x Configuration
Remarks
—
Required
By default,
DHCP-triggered
authentication is disabled.
Remarks
—
Required
The default port access
method is
MAC-address-based.
That is, the macbased
keyword is used by
default.
Required
By default, the guest
VLAN function is disabled.