Alcatel OmniSwitch 6600 Family Network Configuration Manual page 470

Configuring Access Guardian Policies
Supplicant Policy Command Example
802.1x 2/10 non-supplicant policy authentication
pass vlan 10 block fail group-mobility default-vlan
802.1x 3/1 non-supplicant policy authentication
pass vlan 10 block fail group-mobility vlan 43
default-vlan
802.1x 3/10 non-supplicant policy vlan 43 block
page 22-18
Description
If the MAC authentication process is successful
but does not return a VLAN ID for the device, then
the following occurs:
1 The device is assigned to VLAN 10.
If VLAN 10 does not exist, then the device is
2
blocked from accessing the switch on port
2/10.
If the device fails MAC authentication, then the
following occurs:
1 Group Mobility rules are applied.
If Group Mobility classification fails, then the
2
device is assigned to the default VLAN for
port 2/10.
If the default VLAN for port 2/10 is an authen-
3
ticated VLAN, then the device is blocked from
accessing the switch on port 2/10.
If the MAC authentication process is successful
but does not return a VLAN ID for the device, then
the following occurs:
1 The device is assigned to VLAN 10.
If VLAN 10 does not exist, then the device is
2
blocked from accessing the switch on port 3/1.
If the device fails MAC authentication, then the
following occurs:
1
Group Mobility rules are applied.
If Group Mobility classification fails, then the
2
device is assigned to VLAN 43.
If VLAN 43 does not exist or is an authenti-
3
cated VLAN, then the device is assigned to the
default VLAN for port 3/1.
If the default VLAN for port 3/1 is an authenti-
4
cated VLAN, then the device is blocked from
accessing the switch on port 3/1.
No authentication process is performed.but the fol-
lowing classification still occurs:
1 If VLAN 43 exists and is not an authenticated
VLAN, then the device is assigned to
VLAN 43.
If VLAN 43 does not exist or is an authenti-
2
cated VLAN, then the device is blocked from
accessing the switch on port 3/10.
OmniSwitch 6600 Family Network Configuration Guide
Configuring 802.1X
April 2006