Enabling/Disabling Guest Vlan; Setting 802.1X Re-Authentication - Huawei Quidway S3000-EI Series Operation Manual

Operation Manual - Security
Quidway S3000-EI Series Ethernet Switches
T able 1-8 Enabling/disabling Guest VLAN
Operation
Enabling Guest VLAN
Disabling Guest VLAN
Note the following:
Guest VLAN is only supported in the port-based authentication mode.
A switch only can be configured with one Guest VLAN.
Users who skip the authentication, fail in the authentication or get offline belong to
the Guest VLAN.
If dot1x dhcp-launch is configured on the switch, the Guest VLAN function cannot be
implemented because the switch does not send active authentication packet in this
mode.

1.2.9 Setting 802.1x Re-authentication

If the termination-action attribute on the RADIUS serv
the term ination-actio
to 1. The switch re-authe
p ackets.
Y ou can also enable 802.1x re-authentication on the switch through this configuration,
making the switch re-authenticates the access users periodically.
I. Enabling 80
Before enabling the 802.1x re-authentication, you must enab
on the port and globally.
Perf orm the following in
Table 1-9 Enabling/disabling 802.1x user re-authentication
Enable 802.1x user re-authentication
Disable 802.1x user re-authentication
By default, 802.1x re-authentication is disabled on all ports.
In system view, if the interface-list parameter is not specified, it means that to enable
the 802.1x re-authentication feature on all interfaces; if the interface-list parameter is
specified, it means that to enable the feature on the specified interfaces. In Ethern
dot1x guest-vlan vlan-id [ interface interface-list ]
undo dot1x guest-vlan vlan-id [ interface interface-list ]
n attribute in the access-acce
ntic ates the access user periodically after receiving this kind o
2.1x re-authentication
system view or Ethernet port view.
Operation
Huawei Technologies Proprietary
Command
er is set to 1,
pt packet wh
dot1x re-authenticate
interface-list ]
undo dot1x re-authenticate [ interface
interface-list ]
1-8
Chapter 1 802.1x Configuration
the server then sets
ich is sent to the switch
le the 802.1x feature both
Command
[ interface
f
et