Dot1X Guest-Vlan - Cisco Catalyst 3750 Command Reference Manual

Chapter 2 Catalyst 3750 Switch Cisco IOS Commands

dot1x guest-vlan

Use the dot1x guest-vlan interface configuration command on the switch stack or on a standalone switch
to specify an active VLAN as an 802.1x guest VLAN. Use the no form of this command to return to the
default setting.
Syntax Description
vlan-id
Defaults No guest VLAN is configured.
Command Modes Interface configuration
Command History Release
12.1(14)EA1
Usage Guidelines
When you configure a guest VLAN, clients that are not 802.1x-capable are put into the guest VLAN
when the server does not receive a response to its Extensible Authentication Protocol over LAN
(EAPOL) request/identity frame. Clients that are 802.1x-capable but fail authentication are not granted
access to the network.
Guest VLANs are supported on 802.1x ports in single-host and multiple-hosts modes.
You can configure any active VLAN except an RSPAN VLAN or a voice VLAN as an 802.1x guest
VLAN. The guest VLAN feature is not supported on internal VLANs (routed ports) or trunk ports; it is
supported only on access ports.
After you configure a guest VLAN for an 802.1x port to which a Dynamic Host Configuration Protocol
(DHCP) client is connected, you might need to get a host IP address from a DHCP server. You can also
change the settings for restarting the 802.1x authentication process on the switch before the DHCP
process on the client times out and tries to get a host IP address from the DHCP server. Decrease the
settings for the 802.1x authentication process (802.1x quiet period and switch-to-client transmission
time).
Examples
This example shows how to specify VLAN 5 as an 802.1x guest VLAN:
Switch(config-if)# dot1x guest-vlan 5
78-16181-01
dot1x guest-vlan vlan-id
no dot1x guest-vlan
Specify an active VLAN as an 802.1x guest VLAN. The range is 1 to 4094.
Modification
This command was introduced.
Catalyst 3750 Switch Command Reference
dot1x guest-vlan
2-69