Configuring A Guest Vlan - 3Com Switch 4800G 24-Port Configuration Manual

728 C 50: 802.1
HAPTER
Configuring a Guest
VLAN
Configuration
Prerequisites
Configuration Procedure
C
X ONFIGURATION
To do...
Set the port access control
method for the port
Set the maximum number of
users for the port
Enable online user handshake dot1x handshake
Enable multicast trigger
n
You can neither add an 802.1x-enabled port into an aggregation group nor
■
enable 802.1x on a port being a member of an aggregation group.
Once enabled with the 802.1x multicast trigger function, a port sends
■
multicast trigger messages to the client periodically to initiate authentication.
For a user-side device sending untagged traffic, the voice VLAN function and
■
8021.x are mutually exclusive and cannot be configured together on the same
port. For details about voice VLAN, refer to "Voice VLAN Configuration" on
page 99.
In EAP relay authentication mode, the authenticator encapsulates the 802.1x
■
user information in the EAP attributes of RADIUS packets and sends the
packets to the RADIUS server for authentication. In this case, you can configure
the user-name-format command but it does not take effect. For information
about the user-name-format command, refer to "Configuring RADIUS" on
page 765.
If the username of a supplicant contains the version number or one or more
■
blank spaces, you can neither retrieve information nor disconnect the
supplicant by using the username. However, you can use items such as IP
address and connection index number to do so.
Enable 802.1x
■
Set the port access control method to portbased for the port
■
Set the port access control mode to auto for the port
■
Create the VLAN to be specified as the guest VLAN
■
Follow these steps to configure Guest VLAN:
To do...
Enter system view
Use the command...
dot1x port-method
{ macbased | portbased }
dot1x max-user
user-number
dot1x multicast-trigger
Use the command...
system-view
Remarks
Optional
macbased by default
Optional
By default, the maximum
number of concurrent users
accessing a port is 256.
Optional
Enabled by default
Optional
Enabled by default
Remarks
-